CVE Vulnerability Database
Search and browse 425,075 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-63045 | HIGH | 7.5 | 0.3% | Oct 1, 2026 | Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through ... |
| CVE-2026-59797 | CRITICAL | 9.8 | 0.4% | Oct 1, 2026 | Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions.... |
| CVE-2026-59685 | HIGH | 7.5 | 0.3% | Oct 1, 2026 | Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow w... |
| CVE-2026-58415 | MEDIUM | 5.3 | 0.3% | Oct 1, 2026 | Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server befor... |
| CVE-2026-57941 | CRITICAL | 9.8 | 0.4% | Oct 1, 2026 | Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affec... |
| CVE-2026-56449 | HIGH | 7.5 | 0.6% | Oct 1, 2026 | Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies. This issu... |
| CVE-2026-56154 | CRITICAL | 9.8 | 0.4% | Oct 1, 2026 | Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue a... |
| CVE-2026-56153 | HIGH | 7.5 | 0.3% | Oct 1, 2026 | Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP Server: fr... |
| CVE-2026-48005 | HIGH | 7.5 | 0.6% | Oct 1, 2026 | Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all p... |
| CVE-2026-21833 | LOW | 3.7 | 0.2% | Oct 1, 2026 | HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not configure... |
| CVE-2026-14316 | HIGH | 8.1 | — | Oct 1, 2026 | The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buff... |
| CVE-2026-13043 | HIGH | 8.8 | 0.1% | Oct 1, 2026 | A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security ... |
| CVE-2026-12544 | HIGH | 7.7 | 0.2% | Oct 1, 2026 | A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a v... |
| CVE-2026-12541 | HIGH | 8.2 | 1.3% | Oct 1, 2026 | A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump t... |
| CVE-2026-12540 | HIGH | 8.2 | 1.3% | Oct 1, 2026 | A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log task. The req... |
| CVE-2026-12423 | HIGH | 7.5 | 0.4% | Oct 1, 2026 | A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is vulnerable to an authentication... |
| CVE-2026-12405 | HIGH | 8.8 | 1.5% | Oct 1, 2026 | A flaw was found in rubygem-foreman_remote_execution. A command injection vulnerability exists in the Red Hat Satellite ... |
| CVE-2026-103921 | HIGH | 7.4 | 0.3% | Oct 1, 2026 | GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-leg... |
| CVE-2026-101890 | MEDIUM | 5.4 | 0.2% | Oct 1, 2026 | The Prime Mover plugin for WordPress before 2.2.1 contains a stored cross-site scripting vulnerability that allows attac... |
| CVE-2026-101889 | MEDIUM | 6.5 | 0.3% | Oct 1, 2026 | The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated admi... |
| CVE-2026-101888 | HIGH | 7.2 | 0.6% | Oct 1, 2026 | The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authentic... |
| CVE-2025-31980 | MEDIUM | 4.3 | 0.2% | Oct 1, 2026 | HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker t... |
| CVE-2026-9864 | MEDIUM | 4.8 | — | Oct 1, 2026 | Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account... |
| CVE-2026-94620 | CRITICAL | 9.4 | 0.4% | Oct 1, 2026 | Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior to versio... |
| CVE-2026-79896 | HIGH | 7.5 | — | Oct 1, 2026 | Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portm... |