CVE Vulnerability Database
Search and browse 425,147 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-63006 | MEDIUM | 5.3 | 0.5% | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, attacker-controlled HTML in inbound ... |
| CVE-2026-61855 | MEDIUM | 5.3 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, under certain conditions, Zammad... |
| CVE-2026-55217 | MEDIUM | 5.3 | — | Sep 25, 2026 | GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and 11.0.8, a low-privileged authentica... |
| CVE-2026-55214 | HIGH | 8.5 | 0.3% | Sep 25, 2026 | GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store... |
| CVE-2026-53629 | HIGH | 7.1 | — | Sep 25, 2026 | GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, an attacker with the READ ... |
| CVE-2026-53628 | MEDIUM | 5.9 | 0.5% | Sep 25, 2026 | GLPI is a free asset and IT management software package. From 0.84 until 10.0.26 and 11.0.8, an administrator holding th... |
| CVE-2026-53627 | MEDIUM | 6 | — | Sep 25, 2026 | GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a low-privileged authenticated user c... |
| CVE-2026-53626 | HIGH | 7.1 | 0.3% | Sep 25, 2026 | GLPI is a free asset and IT management software package. From 11.0.5 until 11.0.8, under certain conditions, permission ... |
| CVE-2026-53625 | HIGH | 7.5 | — | Sep 25, 2026 | GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, a technician can manipulate... |
| CVE-2026-53610 | HIGH | 7.5 | 0.4% | Sep 25, 2026 | GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, an attacker can craft a URL for a das... |
| CVE-2026-49470 | HIGH | 7.7 | 0.4% | Sep 25, 2026 | GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, the time-based one-time password veri... |
| CVE-2026-49469 | MEDIUM | 4.6 | 0.4% | Sep 25, 2026 | GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, an authenticated hotliner o... |
| CVE-2026-48482 | CRITICAL | 9.4 | 0.3% | Sep 25, 2026 | GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a form administrator can use Form imp... |
| CVE-2026-47679 | HIGH | 8.5 | — | Sep 25, 2026 | GLPI is a free asset and IT management software package. From 10.0.0 until 10.0.26 and 11.0.8, any logged-in GLPI user c... |
| CVE-2026-45801 | MEDIUM | 5.3 | — | Sep 25, 2026 | GLPI is a free asset and IT management software package. From 0.72 until 10.0.26 and 11.0.8, an authenticated user witho... |
| CVE-2026-100306 | MEDIUM | 5.3 | 0.4% | Sep 25, 2026 | TDuck survey form through 6.0 fails to validate write passwords on submission endpoints, enforcing the check only on the... |
| CVE-2026-100305 | MEDIUM | 4.3 | — | Sep 25, 2026 | TDuck survey form through 6.0 fails to enforce form fill-in restrictions on the authenticated submission endpoint POST /... |
| CVE-2026-100304 | MEDIUM | 5.3 | 0.4% | Sep 25, 2026 | TDuck survey form 6.0 contains an information disclosure vulnerability in FormAuthUtils.hasPermission that fails open wh... |
| CVE-2026-100303 | MEDIUM | 5.4 | 0.3% | Sep 25, 2026 | TDuck survey form through 6.0 lacks authorization checks on FormThemeController write endpoints for global form themes a... |
| CVE-2026-100192 | MEDIUM | 6.5 | 0.3% | Sep 25, 2026 | X-SpringBoot through 6.0 exposes appKey and appSecret credentials in the GET /application/manager/select endpoint withou... |
| CVE-2026-97886 | MEDIUM | 6.3 | 0.3% | Sep 25, 2026 | A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be... |
| CVE-2026-97885 | HIGH | 7.3 | — | Sep 25, 2026 | A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affecte... |
| CVE-2026-97884 | MEDIUM | 6.3 | — | Sep 25, 2026 | A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. ... |
| CVE-2026-97883 | HIGH | 7.3 | — | Sep 25, 2026 | A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db... |
| CVE-2026-97882 | HIGH | 7.3 | 0.5% | Sep 25, 2026 | A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be... |