CVE Vulnerability Database
Search and browse 425,092 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-103105 | HIGH | 8.8 | 0.2% | Sep 30, 2026 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API w... |
| CVE-2026-103104 | HIGH | 7.5 | 0.3% | Sep 30, 2026 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementati... |
| CVE-2026-103102 | HIGH | 8.6 | 0.3% | Sep 30, 2026 | Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remot... |
| CVE-2026-103101 | HIGH | 7.5 | 0.3% | Sep 30, 2026 | Pexip Infinity 30.0 through 40.x before 41.0 is affected by improper input validation in the web server that allows a ma... |
| CVE-2026-103100 | HIGH | 7.5 | 0.3% | Sep 30, 2026 | Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malici... |
| CVE-2026-103099 | HIGH | 7.5 | 0.3% | Sep 30, 2026 | Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote att... |
| CVE-2026-102909 | HIGH | 7.3 | — | Sep 30, 2026 | A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function ... |
| CVE-2026-102908 | HIGH | 7.3 | — | Sep 30, 2026 | A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown ... |
| CVE-2026-102906 | MEDIUM | 6.3 | 1.1% | Sep 30, 2026 | A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue ... |
| CVE-2026-102874 | HIGH | 7.3 | — | Sep 30, 2026 | A vulnerability was identified in HKUDS AnyTool 0.1.0. Affected is the function subprocess.run of the file anytool/local... |
| CVE-2026-81310 | MEDIUM | 6.6 | — | Sep 30, 2026 | Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system whe... |
| CVE-2026-78229 | MEDIUM | 6.7 | — | Sep 30, 2026 | Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux sys... |
| CVE-2026-103088 | HIGH | 7.5 | — | Sep 30, 2026 | Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment f... |
| CVE-2026-103087 | HIGH | 7.1 | — | Sep 30, 2026 | Uncontrolled recursion in the Gosub browser engine (gosub-engine) through 0.1.0 and main before commit 46868b3 allows a ... |
| CVE-2026-102847 | MEDIUM | 4.3 | — | Sep 30, 2026 | A flaw has been found in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected ele... |
| CVE-2026-102846 | MEDIUM | 4.7 | 0.2% | Sep 30, 2026 | A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted ... |
| CVE-2026-102845 | MEDIUM | 5.3 | — | Sep 30, 2026 | A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf7... |
| CVE-2026-102844 | LOW | 2.7 | — | Sep 30, 2026 | A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vu... |
| CVE-2026-102843 | MEDIUM | 4.7 | 0.3% | Sep 30, 2026 | A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Th... |
| CVE-2026-51936 | LOW | 2.1 | 0.2% | Sep 30, 2026 | Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipher_export convenience function can be used to copy the ... |
| CVE-2026-103057 | MEDIUM | 4.3 | — | Sep 30, 2026 | AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpo... |
| CVE-2026-103056 | CRITICAL | 9 | — | Sep 30, 2026 | AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStr... |
| CVE-2026-103055 | HIGH | 7.5 | 0.4% | Sep 30, 2026 | AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE serv... |
| CVE-2026-103054 | HIGH | 7.1 | — | Sep 30, 2026 | AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated ... |
| CVE-2026-103053 | MEDIUM | 5.4 | — | Sep 30, 2026 | AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOC_DEV_MO... |