CVE Vulnerability Database
Search and browse 425,147 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-93366 | MEDIUM | 5.4 | 0.2% | Sep 25, 2026 | Bludit CMS through 3.22.0 contains an authorization bypass vulnerability that allows authenticated users with the Author... |
| CVE-2026-91841 | HIGH | 7.8 | 0.2% | Sep 25, 2026 | A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vul... |
| CVE-2026-91840 | HIGH | 7.8 | 0.2% | Sep 25, 2026 | A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to r... |
| CVE-2026-91839 | HIGH | 7.8 | 0.2% | Sep 25, 2026 | A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The nm-fortisslvpn-service im... |
| CVE-2026-91838 | HIGH | 7.8 | 0.1% | Sep 25, 2026 | A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit t... |
| CVE-2026-84462 | HIGH | 8.6 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a security filter that protects Zamm... |
| CVE-2026-65828 | LOW | 2.3 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the legacy destroy_form action on At... |
| CVE-2026-61525 | HIGH | 8.8 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. In 7.0.2 and 7.1.0, zammad's session management for ... |
| CVE-2026-56735 | MEDIUM | 5.3 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, zammad's HTML sanitizer (H... |
| CVE-2026-56734 | MEDIUM | 5.3 | 0.4% | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, during federated authentication (OAu... |
| CVE-2026-56733 | HIGH | 8.7 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, this issue concerns a lack... |
| CVE-2026-56732 | MEDIUM | 5.3 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, vulnerability in Zammad's HTML sanit... |
| CVE-2026-56731 | HIGH | 8.4 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a low-privilege authenticated user m... |
| CVE-2026-56730 | LOW | 2.1 | 0.4% | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, an authorization bypass vulnerabilit... |
| CVE-2026-56728 | MEDIUM | 5.3 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a broken access control vulnerabilit... |
| CVE-2026-56727 | HIGH | 7.1 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary In Zammad's inbound PGP emai... |
| CVE-2026-56726 | MEDIUM | 5.1 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, this vulnerability breaks normal tic... |
| CVE-2026-56725 | HIGH | 8.7 | 0.4% | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An unauthenticated request t... |
| CVE-2026-97879 | MEDIUM | 5.3 | — | Sep 25, 2026 | A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. The affected element is an unknown function ... |
| CVE-2026-97878 | HIGH | 7.3 | — | Sep 25, 2026 | A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Impacted is the function anonymous of the file /d... |
| CVE-2026-97877 | HIGH | 7.3 | — | Sep 25, 2026 | A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.... |
| CVE-2026-97871 | HIGH | 7.3 | — | Sep 25, 2026 | A vulnerability has been found in Zhonglun CloudPos up to 3.0.1.76. This issue affects the function OpenLocalBrowser of ... |
| CVE-2026-95835 | MEDIUM | 5.6 | 0.1% | Sep 25, 2026 | Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other th... |
| CVE-2026-95834 | MEDIUM | 4.6 | 0.1% | Sep 25, 2026 | Use After Free in the drag source path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program... |
| CVE-2026-94445 | HIGH | 8.8 | 0.4% | Sep 25, 2026 | A malicious txtar could escape the intended execution context and force arbitrary writes to the playground host's truste... |