CVE Vulnerability Database
Search and browse 420,253 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-119428 | MEDIUM | 5.8 | 0.3% | Oct 30, 2026 | phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to t... |
| CVE-2026-119427 | HIGH | 8.8 | 0.3% | Oct 30, 2026 | phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting() that allows authenticated use... |
| CVE-2026-119426 | HIGH | 8.8 | 0.3% | Oct 30, 2026 | phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows remote attackers to execute arb... |
| CVE-2026-119425 | MEDIUM | 5.4 | — | Oct 30, 2026 | OPNsense core 26.1.6 through 26.7.7 contains an authentication bypass vulnerability in the captive portal roaming featur... |
| CVE-2026-119424 | MEDIUM | 6.8 | 0.4% | Oct 30, 2026 | OPNsense core before 26.7.8 contains a configuration line injection vulnerability that allows authenticated users with w... |
| CVE-2026-119423 | MEDIUM | 5.3 | 0.4% | Oct 30, 2026 | OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attackers to plant victim... |
| CVE-2026-119422 | MEDIUM | 5.9 | — | Oct 30, 2026 | Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that allows unauthenticated attackers ... |
| CVE-2026-119421 | MEDIUM | 5.9 | — | Oct 30, 2026 | Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing authorization vulnerability that ... |
| CVE-2026-119420 | HIGH | 8.8 | 0.4% | Oct 30, 2026 | Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization administrators to obtain se... |
| CVE-2026-119419 | HIGH | 8.1 | 0.4% | Oct 30, 2026 | CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidat... |
| CVE-2026-119418 | HIGH | 8.1 | — | Oct 30, 2026 | CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidat... |
| CVE-2026-119417 | LOW | 3.7 | — | Oct 30, 2026 | CakePHP 4.5.12, 4.6.5, 5.1.8 through 5.1.10, 5.2.14 through 5.2.15, 5.3.7, and 5.4.0 through 5.4.3 contain an email head... |
| CVE-2026-119416 | MEDIUM | 4.8 | 0.2% | Oct 30, 2026 | CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection th... |
| CVE-2026-119415 | LOW | 3.7 | 0.4% | Oct 30, 2026 | CakePHP through 5.4.3 contains a header injection vulnerability in FormDataPart that allows attackers to inject MIME par... |
| CVE-2026-119414 | MEDIUM | 4.3 | — | Oct 30, 2026 | Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability that allow... |
| CVE-2026-119409 | HIGH | 7.2 | — | Oct 30, 2026 | OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmw... |
| CVE-2026-119408 | HIGH | 8.8 | 0.6% | Oct 30, 2026 | n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via depreca... |
| CVE-2026-119407 | HIGH | 7.1 | 0.1% | Oct 30, 2026 | Element Web and Element Desktop before 1.12.32 accept guest credentials from URL fragment parameters in loadSession, all... |
| CVE-2026-119379 | HIGH | 7.8 | 0.2% | Oct 30, 2026 | SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_... |
| CVE-2026-119378 | MEDIUM | 5.5 | 0.2% | Oct 30, 2026 | SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make appli... |
| CVE-2026-119377 | LOW | 3.3 | 0.1% | Oct 30, 2026 | SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for... |
| CVE-2026-119376 | MEDIUM | 5.5 | 0.2% | Oct 30, 2026 | SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEP... |
| CVE-2026-119375 | MEDIUM | 5.5 | 0.2% | Oct 30, 2026 | SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-c... |
| CVE-2026-119374 | HIGH | 7.8 | 0.2% | Oct 30, 2026 | SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to wr... |
| CVE-2026-119373 | HIGH | 7.8 | 0.2% | Oct 30, 2026 | SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output... |