CVE Vulnerability Database
Search and browse 420,253 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-119568 | HIGH | 7.4 | — | Oct 30, 2026 | vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated at... |
| CVE-2026-119567 | LOW | 3.1 | 0.2% | Oct 30, 2026 | vsftpd through 3.0.5 contains an access control bypass vulnerability that allows authenticated FTP users to execute deni... |
| CVE-2026-119566 | MEDIUM | 4.8 | 0.2% | Oct 30, 2026 | Prometheus through 3.15.1 contains a credential leak vulnerability that allows attackers to capture Azure AD or Google I... |
| CVE-2026-119565 | MEDIUM | 4.3 | — | Oct 30, 2026 | Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notification that al... |
| CVE-2026-119564 | MEDIUM | 5.3 | — | Oct 30, 2026 | Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site edit... |
| CVE-2026-119563 | MEDIUM | 5.4 | 0.2% | Oct 30, 2026 | phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE pri... |
| CVE-2026-119562 | HIGH | 8.8 | 0.2% | Oct 30, 2026 | phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows authenticated users to inject SQL by supply... |
| CVE-2026-119561 | HIGH | 8.1 | 0.2% | Oct 30, 2026 | phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in CustomServer::parseAndValidateAssertionRespo... |
| CVE-2026-119560 | MEDIUM | 5.9 | — | Oct 30, 2026 | OPNsense core through 26.7.8 contains a configuration injection vulnerability that allows authenticated users to append ... |
| CVE-2026-119559 | MEDIUM | 5.9 | 0.3% | Oct 30, 2026 | OpenLiteSpeed through 1.9.4 contains an authentication bypass vulnerability that allows unauthenticated remote attackers... |
| CVE-2026-119558 | LOW | 3.1 | 0.2% | Oct 30, 2026 | OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid full-pr... |
| CVE-2026-119557 | MEDIUM | 5.9 | — | Oct 30, 2026 | n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticate... |
| CVE-2026-119556 | MEDIUM | 4.3 | — | Oct 30, 2026 | Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain a missing... |
| CVE-2026-119555 | MEDIUM | 4.3 | 0.2% | Oct 30, 2026 | Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain an inform... |
| CVE-2026-119554 | MEDIUM | 5.9 | 0.2% | Oct 30, 2026 | Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contain an sql injectio... |
| CVE-2026-119553 | MEDIUM | 6.5 | — | Oct 30, 2026 | Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contains a path travers... |
| CVE-2026-119552 | MEDIUM | 4.8 | — | Oct 30, 2026 | Uptime Kuma through 2.5.8 contains a race condition in the Socket.IO first-run setup handler that allows unauthenticated... |
| CVE-2026-119551 | MEDIUM | 6.5 | 0.3% | Oct 30, 2026 | Jellyfin through 12.4 contains an authorization bypass vulnerability in SuggestionsController.GetSuggestions that allows... |
| CVE-2026-119550 | LOW | 3.5 | 0.2% | Oct 30, 2026 | Jellyfin through 12.4 contains an information disclosure vulnerability in PlaylistsController.GetPlaylist that allows au... |
| CVE-2026-119549 | HIGH | 7.1 | — | Oct 30, 2026 | Jellyfin through 12.4 contains a server-side request forgery vulnerability that lets authenticated users bypass SvgSecur... |
| CVE-2026-119548 | LOW | 3.1 | — | Oct 30, 2026 | Lago through 1.55.0 contains an authorization bypass vulnerability in Invoices::Payments::StripeService that allows user... |
| CVE-2026-119547 | MEDIUM | 4.3 | 0.3% | Oct 30, 2026 | Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains an information disclosure vulnerabili... |
| CVE-2026-119546 | MEDIUM | 5.5 | 0.1% | Oct 30, 2026 | Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a path traversal vulnerability in res... |
| CVE-2026-119545 | MEDIUM | 5.3 | — | Oct 30, 2026 | Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a server-side request forgery vulnera... |
| CVE-2026-119429 | MEDIUM | 4.3 | 0.4% | Oct 30, 2026 | phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows authenticated attackers to remov... |