CVE Vulnerability Database
Search and browse 420,253 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-119482 | MEDIUM | 5.3 | — | Oct 30, 2026 | Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured... |
| CVE-2026-119370 | MEDIUM | 6.5 | — | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell... |
| CVE-2026-119368 | MEDIUM | 5.3 | — | Oct 30, 2026 | Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting ... |
| CVE-2026-117349 | MEDIUM | 5.3 | 0.2% | Oct 30, 2026 | Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue. |
| CVE-2026-117346 | HIGH | 7.5 | 0.2% | Oct 30, 2026 | Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit |
| CVE-2026-116860 | MEDIUM | 5.3 | — | Oct 30, 2026 | Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Contr... |
| CVE-2026-112905 | CRITICAL | 9 | 0.5% | Oct 30, 2026 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version... |
| CVE-2026-111487 | MEDIUM | 4.3 | 0.1% | Oct 30, 2026 | An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module. |
| CVE-2026-110799 | CRITICAL | 9.8 | — | Oct 30, 2026 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version... |
| CVE-2015-20130 | MEDIUM | 6.1 | 0.3% | Oct 30, 2026 | Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/repo... |
| CVE-2010-20125 | HIGH | 7.5 | — | Oct 30, 2026 | DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated a... |
| CVE-2026-91915 | MEDIUM | 6.8 | 0.3% | Oct 30, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output U... |
| CVE-2026-91914 | HIGH | 7.1 | 0.3% | Oct 30, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An una... |
| CVE-2026-91913 | HIGH | 8.8 | 2.7% | Oct 30, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an ... |
| CVE-2026-91912 | MEDIUM | 6.5 | 0.1% | Oct 30, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerability. A lo... |
| CVE-2026-86715 | HIGH | 7.1 | — | Oct 30, 2026 | Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc. V... |
| CVE-2026-49116 | — | — | — | Oct 30, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-49115 | — | — | — | Oct 30, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-119602 | LOW | 3.7 | — | Oct 30, 2026 | libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that al... |
| CVE-2026-119601 | MEDIUM | 6.1 | 0.1% | Oct 30, 2026 | AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() that allows attackers to corrup... |
| CVE-2026-119600 | MEDIUM | 4.8 | 0.4% | Oct 30, 2026 | tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to read process... |
| CVE-2026-119599 | MEDIUM | 4.3 | — | Oct 30, 2026 | AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-le... |
| CVE-2026-119598 | MEDIUM | 4.3 | — | Oct 30, 2026 | Miaomiaowu before 0.9.3 contains an insecure direct object reference vulnerability in /api/user/proxy-provider-configs t... |
| CVE-2026-119597 | CRITICAL | 9.8 | 0.4% | Oct 30, 2026 | OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to ... |
| CVE-2026-119596 | MEDIUM | 4.3 | 0.3% | Oct 30, 2026 | UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZipController::show that allows authentic... |