CVE Vulnerability Database
Search and browse 425,067 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-104451 | MEDIUM | 4.3 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in RevisionsHandler that allows attackers to re... |
| CVE-2026-104450 | MEDIUM | 6.5 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains a missing authorization flaw in the pointimage action (tools/attach/actions/pointimage.php... |
| CVE-2026-104449 | MEDIUM | 6.5 | 0.3% | Oct 2, 2026 | YesWiki before 4.6.7 contains an access control vulnerability allowing unauthenticated attackers to overwrite any existi... |
| CVE-2026-104448 | HIGH | 8.1 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the ajaxdeletepage handler, which permanentl... |
| CVE-2026-104447 | HIGH | 7.1 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the autoupdate UpdateAction that allows atta... |
| CVE-2026-104446 | MEDIUM | 6.5 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated atta... |
| CVE-2026-104445 | HIGH | 8.2 | 0.4% | Oct 2, 2026 | YesWiki before 4.6.7 contains an authentication bypass vulnerability in the ActivityPub inbox that fails to bind the ver... |
| CVE-2026-104444 | HIGH | 7.1 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains an authorization bypass vulnerability in the comments API editComment route that allows au... |
| CVE-2026-104443 | HIGH | 8.1 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains an empty-filter scope bypass in the triples delete API that allows any authenticated user ... |
| CVE-2026-104442 | MEDIUM | 5.8 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers ... |
| CVE-2026-104441 | MEDIUM | 5.3 | 0.3% | Oct 2, 2026 | YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers ... |
| CVE-2026-104440 | MEDIUM | 5.3 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains a blind server-side request forgery vulnerability that allows unauthenticated attackers to... |
| CVE-2026-104439 | MEDIUM | 5.3 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains a user enumeration vulnerability in LostPasswordAction.php that allows unauthenticated att... |
| CVE-2026-104438 | MEDIUM | 5.3 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains a missing authorization vulnerability in the listpagestag and includepages actions of the ... |
| CVE-2026-104437 | HIGH | 7.4 | 0.2% | Oct 2, 2026 | Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a Z... |
| CVE-2026-104436 | LOW | 3.7 | 0.3% | Oct 2, 2026 | Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust b... |
| CVE-2026-104435 | HIGH | 7.4 | — | Oct 2, 2026 | Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs sign... |
| CVE-2026-104434 | MEDIUM | 6.5 | — | Oct 2, 2026 | ZcashFoundation Zebra zebra-rpc before 8.0.0 and zebrad before 4.5.0 contain a reachable assertion in the z_listunifiedr... |
| CVE-2026-104432 | MEDIUM | 5.3 | 0.3% | Oct 2, 2026 | Zebra before 6.3.0 contains an improper exceptional condition check in ChainSync::obtain_tips that discards valid one-ha... |
| CVE-2026-104431 | HIGH | 7.5 | — | Oct 2, 2026 | Zebra before 6.0.0 contains a denial of service vulnerability that allows unauthenticated peers to stall Tokio workers b... |
| CVE-2026-104430 | HIGH | 7.5 | — | Oct 2, 2026 | Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcash... |
| CVE-2026-104429 | MEDIUM | 5.3 | — | Oct 2, 2026 | Zebra (zebrad) 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as dir... |
| CVE-2026-104428 | MEDIUM | 5.3 | 0.4% | Oct 2, 2026 | The getblock RPC method in zebra-rpc before 11.0.0, used by the Zcash Foundation's Zebra node, panics on verbosity 2 for... |
| CVE-2026-104427 | MEDIUM | 5.9 | 0.3% | Oct 2, 2026 | Zebra before 6.1.0 contains an incomplete cleanup vulnerability in the state write task that allows remote unauthenticat... |
| CVE-2026-104426 | MEDIUM | 5.9 | — | Oct 2, 2026 | Zebra before 6.1.0 contains an inefficient algorithmic complexity vulnerability in remaining_transaction_value that clon... |