CVE Vulnerability Database
Search and browse 420,256 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-22110 | HIGH | 8.7 | — | Oct 30, 2026 | The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brut... |
| CVE-2026-22109 | HIGH | 8.4 | — | Oct 30, 2026 | The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defau... |
| CVE-2026-22105 | HIGH | 8.7 | — | Oct 30, 2026 | Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the dev... |
| CVE-2026-116366 | CRITICAL | 9.5 | — | Oct 30, 2026 | An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user wi... |
| CVE-2025-31704 | CRITICAL | 9.8 | 1.4% | Oct 30, 2026 | A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially craf... |
| CVE-2026-14467 | HIGH | 8.2 | 0.4% | Oct 30, 2026 | An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised... |
| CVE-2026-97209 | MEDIUM | 5.4 | 0.1% | Oct 30, 2026 | Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another use... |
| CVE-2026-65874 | HIGH | 8.8 | 0.6% | Oct 30, 2026 | This issue affects Apache Fineract versions up to and including 1.15.0. The Center read endpoint (GET /api/v1/centers) a... |
| CVE-2026-64618 | CRITICAL | 9.8 | 0.6% | Oct 30, 2026 | Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache Fine... |
| CVE-2026-59396 | MEDIUM | 4.9 | 0.3% | Oct 30, 2026 | A denial-of-service vulnerability exists in UAA's private_key_jwt client-authentication mechanism. When UAA retrieves a ... |
| CVE-2026-59388 | MEDIUM | 6.5 | 0.3% | Oct 30, 2026 | Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentials are exp... |
| CVE-2026-59387 | HIGH | 8.8 | 0.3% | Oct 30, 2026 | The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/ en... |
| CVE-2026-59386 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | A SpaceSupporter could improperly modify an application's start command and buildpack—actions requiring SpaceDeveloper p... |
| CVE-2026-59385 | LOW | 2.7 | 0.2% | Oct 30, 2026 | A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, en... |
| CVE-2026-115456 | LOW | 3.7 | 0.2% | Oct 30, 2026 | A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminat... |
| CVE-2026-115274 | MEDIUM | 6.9 | 0.5% | Oct 30, 2026 | Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an ... |
| CVE-2026-109821 | MEDIUM | 6.3 | 0.5% | Oct 30, 2026 | Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an a... |
| CVE-2026-82104 | CRITICAL | 9.4 | 0.4% | Oct 30, 2026 | In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 thr... |
| CVE-2026-115455 | MEDIUM | 6.5 | 0.3% | Oct 30, 2026 | A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, interna... |
| CVE-2026-114691 | MEDIUM | 5.9 | 0.4% | Oct 30, 2026 | A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a ... |
| CVE-2026-114690 | MEDIUM | 6.2 | 0.1% | Oct 30, 2026 | A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementa... |
| CVE-2026-97645 | HIGH | 7.2 | 0.2% | Oct 30, 2026 | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via List Field in all versions up to... |
| CVE-2026-90437 | HIGH | 7.2 | 0.2% | Oct 30, 2026 | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Excerpt / Post Custom Field... |
| CVE-2026-89435 | HIGH | 8.8 | 0.4% | Oct 30, 2026 | The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More plugin for WordPress is vul... |
| CVE-2026-118952 | MEDIUM | 6.5 | — | Oct 30, 2026 | A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a diff... |