CVE Vulnerability Database
Search and browse 420,253 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-119372 | MEDIUM | 5.5 | 0.1% | Oct 30, 2026 | SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a use-after-free vulnerability in ... |
| CVE-2026-119371 | MEDIUM | 5.5 | 0.2% | Oct 30, 2026 | SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEP... |
| CVE-2026-119364 | MEDIUM | 5.3 | — | Oct 30, 2026 | ProFTPD through 1.3.9e and 1.3.10rc1 through 1.3.10rc4 contains a link-following vulnerability in mod_copy that allows a... |
| CVE-2026-119147 | MEDIUM | 4.3 | 0.3% | Oct 30, 2026 | ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the mod_sftp copy-file extension handler that sk... |
| CVE-2026-119146 | MEDIUM | 5.6 | 0.5% | Oct 30, 2026 | ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_rewrite int:utf8trans RewriteMap... |
| CVE-2026-111505 | HIGH | 8.8 | — | Oct 30, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an ... |
| CVE-2026-111504 | HIGH | 7.2 | — | Oct 30, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Com... |
| CVE-2026-110972 | HIGH | 8.6 | 0.2% | Oct 30, 2026 | Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backen... |
| CVE-2026-110971 | HIGH | 7.7 | 0.2% | Oct 30, 2026 | Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decod... |
| CVE-2026-110970 | LOW | 2.3 | 0.3% | Oct 30, 2026 | Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct a Man-In-T... |
| CVE-2026-105924 | MEDIUM | 4.3 | — | Oct 30, 2026 | A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module. |
| CVE-2026-101214 | HIGH | 7.2 | — | Oct 30, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an ... |
| CVE-2026-101213 | HIGH | 7.8 | — | Oct 30, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability. A low priv... |
| CVE-2026-101210 | HIGH | 7.2 | — | Oct 30, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an ... |
| CVE-2026-101209 | LOW | 2.7 | — | Oct 30, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Server-Side Request Forgery (SSRF) vulnerability. A high... |
| CVE-2025-68395 | MEDIUM | 5.1 | 0.2% | Oct 30, 2026 | ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS. A low privileged... |
| CVE-2025-68394 | HIGH | 8.4 | 0.2% | Oct 30, 2026 | ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization o... |
| CVE-2025-68393 | HIGH | 8.4 | 0.2% | Oct 30, 2026 | ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization o... |
| CVE-2025-68392 | MEDIUM | 5.1 | 0.2% | Oct 30, 2026 | ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of the functionalities reserved f... |
| CVE-2025-68391 | MEDIUM | 5.3 | 0.2% | Oct 30, 2026 | ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload. Any user is able to upload arbi... |
| CVE-2026-85268 | HIGH | 8.7 | — | Oct 30, 2026 | A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase A... |
| CVE-2026-22114 | MEDIUM | 5.3 | — | Oct 30, 2026 | HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace is exhausti... |
| CVE-2026-22110 | HIGH | 8.7 | — | Oct 30, 2026 | The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brut... |
| CVE-2026-22109 | HIGH | 8.4 | — | Oct 30, 2026 | The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defau... |
| CVE-2026-22105 | HIGH | 8.7 | — | Oct 30, 2026 | Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the dev... |