CVE Vulnerability Database
Search and browse 425,067 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-104425 | MEDIUM | 5.3 | — | Oct 2, 2026 | ZcashFoundation Zebra before 6.1.0 contains a resource exhaustion vulnerability that allows unauthenticated peers to deg... |
| CVE-2026-104424 | LOW | 3.7 | 0.3% | Oct 2, 2026 | Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits hea... |
| CVE-2026-104423 | HIGH | 7.5 | — | Oct 2, 2026 | Zebra (zebrad) before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers ... |
| CVE-2026-104422 | HIGH | 7.5 | — | Oct 2, 2026 | The block sync download path in Zebra (zebrad) before 6.3.0 reads a block's height from its unvalidated coinbase scriptS... |
| CVE-2026-104421 | MEDIUM | 5.3 | — | Oct 2, 2026 | Zebra before 6.2.1 contains an incomplete cleanup vulnerability that allows unauthenticated peers to block downloading o... |
| CVE-2026-104420 | MEDIUM | 5.3 | 0.3% | Oct 2, 2026 | Zebra before 6.3.0 contains a protection mechanism failure that allows unauthenticated peers to evade misbehavior scorin... |
| CVE-2026-104419 | MEDIUM | 4.8 | 0.1% | Oct 2, 2026 | Zebra (zebrad) 4.5.0 before 6.3.0 discards which peer supplied the block hashes in FindBlocks responses, then assigns 10... |
| CVE-2026-104418 | HIGH | 7.2 | — | Oct 2, 2026 | Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators ... |
| CVE-2026-104417 | MEDIUM | 4.9 | — | Oct 2, 2026 | Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows au... |
| CVE-2026-104416 | HIGH | 7.5 | 0.3% | Oct 2, 2026 | Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff user... |
| CVE-2026-104415 | LOW | 3.1 | — | Oct 2, 2026 | Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level... |
| CVE-2026-104414 | HIGH | 8.1 | — | Oct 2, 2026 | Ghost from 2.5.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows attackers to inject untr... |
| CVE-2026-104413 | HIGH | 7.3 | — | Oct 2, 2026 | Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including ... |
| CVE-2026-104412 | MEDIUM | 4.3 | 0.2% | Oct 2, 2026 | Ghost 0.5.0 before 6.64.0 does not correctly restrict staff role assignment, allowing users with the Editor or Super Edi... |
| CVE-2026-104411 | HIGH | 7.3 | — | Oct 2, 2026 | Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scr... |
| CVE-2026-104410 | HIGH | 7.5 | — | Oct 2, 2026 | SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish readers to read password-protec... |
| CVE-2026-103763 | MEDIUM | 5.8 | — | Oct 2, 2026 | SiYuan before v3.8.5 contains an information disclosure vulnerability that allows read-only publish readers to learn met... |
| CVE-2026-103762 | MEDIUM | 5.3 | 0.2% | Oct 2, 2026 | SiYuan before v3.8.5 contains a missing authorization vulnerability in the getRefCreateSavePath, getShorthandSavePath, a... |
| CVE-2026-97876 | MEDIUM | 6.4 | — | Oct 2, 2026 | A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot a... |
| CVE-2026-96990 | HIGH | 8.2 | 0.4% | Oct 2, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Erlang bindings. This issue affec... |
| CVE-2026-94651 | HIGH | 7.5 | 0.4% | Oct 2, 2026 | improper handling of exceptional conditions, Missing release of resource after effective lifetime vulnerability in Apach... |
| CVE-2026-94650 | HIGH | 8.2 | — | Oct 2, 2026 | Uncontrolled Recursion vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.... |
| CVE-2026-94645 | HIGH | 8.2 | 0.4% | Oct 2, 2026 | Improper validation of specified quantity in input, Allocation of resources without limits or throttling vulnerability i... |
| CVE-2026-94644 | HIGH | 8.2 | 0.4% | Oct 2, 2026 | Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings. This issue affects ... |
| CVE-2026-94642 | HIGH | 8.7 | 0.4% | Oct 2, 2026 | Uncaught exception vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. U... |