CVE Vulnerability Database
Search and browse 420,253 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-44344 | MEDIUM | 6.6 | 0.3% | Oct 30, 2026 | Chamilo LMS is an open-source learning management system. In the 1.x line before 1.11.40, and the 2.x line before 2.0.1,... |
| CVE-2026-119682 | HIGH | 7.9 | 0.3% | Oct 30, 2026 | An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine S... |
| CVE-2026-119680 | HIGH | 8.5 | 0.2% | Oct 30, 2026 | A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) due to i... |
| CVE-2026-119665 | MEDIUM | 6.3 | — | Oct 30, 2026 | WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionVi... |
| CVE-2026-119664 | MEDIUM | 4.3 | 0.3% | Oct 30, 2026 | Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerability in the cloud sync API chatsM... |
| CVE-2026-119663 | MEDIUM | 4.3 | 0.3% | Oct 30, 2026 | Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connect... |
| CVE-2026-119662 | HIGH | 8.8 | — | Oct 30, 2026 | Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent network attackers to au... |
| CVE-2026-119661 | MEDIUM | 4.2 | — | Oct 30, 2026 | ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescLib/deleteEntries endpoint that... |
| CVE-2026-119660 | CRITICAL | 9.8 | 0.5% | Oct 30, 2026 | MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admi... |
| CVE-2026-119659 | MEDIUM | 5.4 | 0.3% | Oct 30, 2026 | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated users to access other us... |
| CVE-2026-119658 | MEDIUM | 4.3 | — | Oct 30, 2026 | PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role acco... |
| CVE-2026-119657 | MEDIUM | 5 | — | Oct 30, 2026 | FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated ... |
| CVE-2026-119656 | HIGH | 7.5 | 0.3% | Oct 30, 2026 | CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Agent/GetGoodsPag... |
| CVE-2026-119655 | HIGH | 7.5 | 0.3% | Oct 30, 2026 | CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Good/GetGoodsPageList endpoint... |
| CVE-2026-119654 | HIGH | 8.8 | — | Oct 30, 2026 | DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticated user to escalate p... |
| CVE-2026-119653 | MEDIUM | 4.3 | — | Oct 30, 2026 | Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list ... |
| CVE-2026-119652 | MEDIUM | 4.3 | 0.3% | Oct 30, 2026 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FriendController.friendList that... |
| CVE-2026-119651 | MEDIUM | 5.4 | 0.3% | Oct 30, 2026 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that allo... |
| CVE-2026-119650 | MEDIUM | 5.4 | — | Oct 30, 2026 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in PrivacyController that allows au... |
| CVE-2026-119649 | HIGH | 7.1 | — | Oct 30, 2026 | Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryService.CheckMediaFolder... |
| CVE-2026-119648 | MEDIUM | 4.3 | 0.3% | Oct 30, 2026 | Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerability that allows authenticated ... |
| CVE-2026-119647 | MEDIUM | 4.3 | 0.3% | Oct 30, 2026 | RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in SysUserServiceImpl.selectUserListByDept t... |
| CVE-2026-119646 | MEDIUM | 4.3 | — | Oct 30, 2026 | Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated users to read other s... |
| CVE-2026-119645 | MEDIUM | 6.5 | — | Oct 30, 2026 | ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc() that allows authenticated us... |
| CVE-2026-119644 | MEDIUM | 5.4 | 0.3% | Oct 30, 2026 | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to mo... |