CVE Vulnerability Database
Search and browse 420,251 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-7003 | MEDIUM | 5.3 | 0.3% | Oct 30, 2026 | WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers ... |
| CVE-2026-78527 | HIGH | 8.8 | — | Oct 30, 2026 | Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions. |
| CVE-2026-73322 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is e... |
| CVE-2026-73186 | HIGH | 8.8 | — | Oct 30, 2026 | Subscriber PHP Object Injection in Enable Media Replace <= 4.2.2 versions. |
| CVE-2026-66026 | — | — | — | Oct 30, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-66025 | — | — | — | Oct 30, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-62331 | HIGH | 8.2 | — | Oct 30, 2026 | praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Contro... |
| CVE-2026-62303 | MEDIUM | 5.9 | — | Oct 30, 2026 | Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, `SegmentTreeNode::sanitizeResourc... |
| CVE-2026-62298 | NONE | 0 | — | Oct 30, 2026 | mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, `OPEN TYPE` decoding can dereference an unallocated member pointe... |
| CVE-2026-62264 | HIGH | 7.5 | 0.5% | Oct 30, 2026 | PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1,... |
| CVE-2026-62162 | HIGH | 8.2 | — | Oct 30, 2026 | Hydra is a layer-two scalability solution for Cardano. Prior to 2.1.0, the `Claim` branch in `hydra-plutus/validators/de... |
| CVE-2026-62160 | HIGH | 8.7 | — | Oct 30, 2026 | Daptin is a GraphQL/JSON-API headless CMS. Prior to 0.12.26, the global `LanguageMiddleware` in `server/language.go` pas... |
| CVE-2026-62122 | MEDIUM | 5.3 | — | Oct 30, 2026 | Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Contr... |
| CVE-2026-62121 | MEDIUM | 6.5 | — | Oct 30, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-62057 | MEDIUM | 5.3 | — | Oct 30, 2026 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Fahim Reza Divi Contact F... |
| CVE-2026-62056 | MEDIUM | 5.3 | — | Oct 30, 2026 | Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured... |
| CVE-2026-62047 | MEDIUM | 4.3 | — | Oct 30, 2026 | Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly ... |
| CVE-2026-62023 | MEDIUM | 4.3 | — | Oct 30, 2026 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templa... |
| CVE-2026-62019 | MEDIUM | 4.3 | — | Oct 30, 2026 | Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Acc... |
| CVE-2026-61854 | HIGH | 8.2 | — | Oct 30, 2026 | VoiceSentinel is a real-time voice moderation system for Minecraft servers. From 2.2.1 until 3.3.1, the optional report ... |
| CVE-2026-61848 | MEDIUM | 6.3 | 0.5% | Oct 30, 2026 | Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when Crass ... |
| CVE-2026-61847 | MEDIUM | 6.3 | — | Oct 30, 2026 | Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when the `:... |
| CVE-2026-61846 | MEDIUM | 6.3 | 0.5% | Oct 30, 2026 | Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass recur... |
| CVE-2026-61845 | HIGH | 8.9 | — | Oct 30, 2026 | Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass conve... |
| CVE-2026-61840 | LOW | 2.3 | — | Oct 30, 2026 | Quest Bot is an opensource Discord Bot. Prior to 1.1.9, the `image to GIF` command uses a request helper that validates ... |