CVE Vulnerability Database
Search and browse 425,147 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-57861 | — | — | — | Sep 25, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-53990 | — | — | — | Sep 25, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-100373 | MEDIUM | 4.1 | — | Sep 25, 2026 | OpenMetadata through 2.0.2 contains a server-side request forgery vulnerability in the URLValidator.validateURL function... |
| CVE-2026-100372 | HIGH | 7.2 | 1.1% | Sep 25, 2026 | ClipBucket v5 before 5.5.3-#197 contains a path traversal vulnerability in the admin template editor that allows authent... |
| CVE-2026-100368 | HIGH | 8.4 | 0.6% | Sep 25, 2026 | CliInvoke is a .NET library for invoking command-line programs, and its `CliInvoke.Specializations` packages provide spe... |
| CVE-2026-100310 | HIGH | 7 | 0.1% | Sep 25, 2026 | GNU libextractor before 1.16 loads plugins from an untrusted search path specified by the LIBEXTRACTOR_PREFIX environmen... |
| CVE-2026-100208 | HIGH | 8.1 | 0.5% | Sep 25, 2026 | Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a networ... |
| CVE-2026-97897 | LOW | 3.5 | 0.2% | Sep 25, 2026 | A security flaw has been discovered in Krayin laravel-crm up to 2.2.5. This issue affects some unknown processing of the... |
| CVE-2026-97896 | LOW | 3.5 | 0.2% | Sep 25, 2026 | A vulnerability was identified in krayin laravel-crm up to 2.2.5. This vulnerability affects the function ConfigurationF... |
| CVE-2026-97895 | MEDIUM | 6.3 | — | Sep 25, 2026 | A vulnerability was determined in krayin laravel-crm up to 2.2.5. This affects an unknown part of the file packages/Webk... |
| CVE-2026-97064 | CRITICAL | 9.1 | 0.3% | Sep 25, 2026 | X-SpringBoot through 6.0 ships with a hardcoded static master login verification code 172839 enabled by default in the d... |
| CVE-2026-97063 | CRITICAL | 9.1 | — | Sep 25, 2026 | X-SpringBoot through 6.0 returns login verification codes in HTTP responses from unauthenticated endpoints GET /sys/mobi... |
| CVE-2026-97060 | HIGH | 7.2 | 0.3% | Sep 25, 2026 | X-SpringBoot through 6.0 lacks object-level authorization in user management endpoints, allowing sub-administrators to m... |
| CVE-2026-84465 | HIGH | 7.1 | 0.1% | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when Zammad checks the digital signa... |
| CVE-2026-84464 | HIGH | 7.1 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's External Data Source featur... |
| CVE-2026-84463 | MEDIUM | 6.3 | 0.1% | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a user with Knowledge Base editing r... |
| CVE-2026-84461 | MEDIUM | 6.9 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the two-factor login step let an att... |
| CVE-2026-84460 | MEDIUM | 5.3 | 0.3% | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, any authenticated user can call the ... |
| CVE-2026-84458 | CRITICAL | 9.1 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Automatic account link on ... |
| CVE-2026-63216 | MEDIUM | 5.3 | 0.2% | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, unsanitized option labels are render... |
| CVE-2026-63208 | MEDIUM | 5.1 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when a Microsoft Graph request fails... |
| CVE-2026-63207 | MEDIUM | 6.9 | 0.2% | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, an authenticated administrator c... |
| CVE-2026-63206 | MEDIUM | 5.3 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's HTML sanitizer, which block... |
| CVE-2026-63205 | MEDIUM | 5.1 | 0.3% | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when creating or updating an email s... |
| CVE-2026-63204 | LOW | 2.3 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, an authenticated user with agent per... |