CVE Vulnerability Database
Search and browse 425,078 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-94269 | MEDIUM | 6.3 | — | Oct 1, 2026 | Use of Non-Canonical URL paths for authorization decisions vulnerability in Apache APISIX. In some configurations whe... |
| CVE-2026-94250 | HIGH | 8.2 | — | Oct 1, 2026 | Allocation of resources without limits or throttling vulnerability in batch-requests plugin in Apache APISIX. An unau... |
| CVE-2026-94220 | LOW | 2.1 | — | Oct 1, 2026 | Cross-Site request forgery (CSRF) vulnerability in feishu-auth and dingtalk-auth plugins in Apache APISIX. An attacke... |
| CVE-2026-94212 | MEDIUM | 6.4 | — | Oct 1, 2026 | Improper verification of cryptographic signature vulnerability in Apache APISIX. Any unauthenticated attacker could i... |
| CVE-2026-103858 | MEDIUM | 5.3 | — | Oct 1, 2026 | MISP contains an incomplete authorization check in the discussion posting functionality. When a user submits a post to a... |
| CVE-2026-103754 | MEDIUM | 5.9 | — | Oct 1, 2026 | A flaw was found in ansible-runner. The unstream_dir() function, which receives and extracts a streamed zip archive on t... |
| CVE-2026-103680 | MEDIUM | 6.5 | 0.3% | Oct 1, 2026 | A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function when generating numb... |
| CVE-2026-103679 | MEDIUM | 6.5 | 0.3% | Oct 1, 2026 | A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport ... |
| CVE-2026-103678 | HIGH | 8.1 | 0.2% | Oct 1, 2026 | A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing un... |
| CVE-2026-103336 | MEDIUM | 5.3 | — | Oct 1, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in Smackcoders Inc. WP Ultimate CSV Importer wp-ultimate... |
| CVE-2026-88789 | HIGH | 8.6 | — | Oct 1, 2026 | Improper Restriction of XML External Entity Reference in the XSLT support extension (camel-quarkus-support-xalan) in Apa... |
| CVE-2026-82806 | MEDIUM | 5.3 | — | Oct 1, 2026 | Exposure of data element to wrong session vulnerability in Apache APISIX. This issue affects Apache APISIX: from 2.3.... |
| CVE-2026-78242 | MEDIUM | 5.7 | — | Oct 1, 2026 | Insertion of sensitive information into log file vulnerability in Apache APISIX. This vulnerability can cause the unm... |
| CVE-2026-103758 | HIGH | 8.1 | — | Oct 1, 2026 | Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP s... |
| CVE-2026-103757 | HIGH | 7.7 | — | Oct 1, 2026 | Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUr... |
| CVE-2026-103353 | MEDIUM | 5.3 | — | Oct 1, 2026 | Incorrect Behavior Order vulnerability in WP ManageNinja LLC FluentForm fluentform allows Removing Important Client Func... |
| CVE-2026-103292 | HIGH | 8 | — | Oct 1, 2026 | Ghost versions from 0.5.3 through versions prior to 6.50.0 fail to sanitize the data placed in the JSON-LD HTML tag emit... |
| CVE-2026-103291 | MEDIUM | 6.4 | 0.1% | Oct 1, 2026 | Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetchi... |
| CVE-2026-103290 | LOW | 3.8 | — | Oct 1, 2026 | Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. ... |
| CVE-2026-103289 | MEDIUM | 6.5 | — | Oct 1, 2026 | Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated memb... |
| CVE-2026-103288 | MEDIUM | 6.5 | — | Oct 1, 2026 | Ghost, an open-source publishing platform, contains an input validation flaw in its comment like feature in versions fro... |
| CVE-2026-103287 | LOW | 2.7 | 0.2% | Oct 1, 2026 | Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webhooks feature that all... |
| CVE-2026-103286 | HIGH | 7.3 | — | Oct 1, 2026 | Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that a... |
| CVE-2026-103285 | MEDIUM | 4.3 | — | Oct 1, 2026 | Ghost versions from 5.19.0 before 6.57.1 contain a cross-site request forgery vulnerability in the post feedback functio... |
| CVE-2026-103284 | MEDIUM | 4.3 | — | Oct 1, 2026 | Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint... |