CVE Vulnerability Database
Search and browse 425,069 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-82357 | MEDIUM | 6.5 | 0.3% | Oct 1, 2026 | RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An ob... |
| CVE-2026-71542 | HIGH | 8.7 | — | Oct 1, 2026 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versio... |
| CVE-2026-71426 | HIGH | 7.1 | — | Oct 1, 2026 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versio... |
| CVE-2026-70650 | HIGH | 8.8 | 0.3% | Oct 1, 2026 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versio... |
| CVE-2026-56662 | CRITICAL | 9.6 | 0.2% | Oct 1, 2026 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to ... |
| CVE-2026-56661 | HIGH | 7.5 | — | Oct 1, 2026 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to ... |
| CVE-2026-56660 | CRITICAL | 9.1 | — | Oct 1, 2026 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to ... |
| CVE-2026-55252 | MEDIUM | 5.1 | 0.3% | Oct 1, 2026 | OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes... |
| CVE-2026-55251 | MEDIUM | 6.5 | 0.1% | Oct 1, 2026 | NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to... |
| CVE-2026-54049 | HIGH | 8.7 | 0.3% | Oct 1, 2026 | Sakai is a Collaboration and Learning Environment (CLE). From versions 23.0 to before 23.5, and versions 25.0 to before ... |
| CVE-2026-53964 | HIGH | 7.2 | 0.5% | Oct 1, 2026 | Document Merge Service is a document template merge service providing an API to manage templates and merge them with giv... |
| CVE-2026-53953 | CRITICAL | 9.1 | 0.3% | Oct 1, 2026 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versio... |
| CVE-2026-14984 | CRITICAL | 9.4 | 0.1% | Oct 1, 2026 | Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote u... |
| CVE-2026-14983 | HIGH | 7.1 | 0.2% | Oct 1, 2026 | Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticat... |
| CVE-2026-104286 | CRITICAL | 9.8 | 4.6% | Oct 1, 2026 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.... |
| CVE-2026-103484 | HIGH | 8.8 | 0.4% | Oct 1, 2026 | IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbit... |
| CVE-2026-102671 | MEDIUM | 5.3 | 0.1% | Oct 1, 2026 | The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default. |
| CVE-2026-102670 | MEDIUM | 4.3 | 0.1% | Oct 1, 2026 | Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it. |
| CVE-2026-102669 | MEDIUM | 5.3 | 0.2% | Oct 1, 2026 | Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages. |
| CVE-2026-102668 | MEDIUM | 5.3 | 0.1% | Oct 1, 2026 | The Joyland AI app accepts any TLS certificates from any server without validation. |
| CVE-2026-102667 | HIGH | 8.3 | 0.2% | Oct 1, 2026 | Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Withou... |
| CVE-2026-102666 | MEDIUM | 6.5 | 0.2% | Oct 1, 2026 | The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to acce... |
| CVE-2026-102628 | CRITICAL | 9.3 | 0.3% | Oct 1, 2026 | The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG=true, APP_ENV=local) in... |
| CVE-2026-100251 | MEDIUM | 6.5 | 0.3% | Oct 1, 2026 | Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay... |
| CVE-2026-8618 | HIGH | 7.7 | — | Oct 1, 2026 | A stack-based buffer overflow vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Deco M9 Plus due to insuffic... |