CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-84295 | CRITICAL | 10 | 0.6% | Oct 29, 2026 | Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allo... |
| CVE-2026-84294 | HIGH | 7.7 | 0.4% | Oct 29, 2026 | Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 20... |
| CVE-2026-77819 | MEDIUM | 6.5 | 0.4% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to im... |
| CVE-2026-77817 | MEDIUM | 6.5 | 0.3% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to... |
| CVE-2026-66912 | MEDIUM | 5.3 | 0.5% | Oct 29, 2026 | Zimbra is vulnerable to Stored Cross-Site Scripting (XSS) via the From email header during HTML reply composition in Cla... |
| CVE-2026-66911 | MEDIUM | 5.3 | 0.5% | Oct 29, 2026 | Zimbra is vulnerable to stored cross-site scripting (XSS) via the Content-Location MIME header in email attachments. Due... |
| CVE-2026-62131 | CRITICAL | 9.8 | 0.3% | Oct 29, 2026 | Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions. |
| CVE-2026-62018 | CRITICAL | 9.8 | — | Oct 29, 2026 | Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions. |
| CVE-2026-62017 | CRITICAL | 9.8 | — | Oct 29, 2026 | Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions. |
| CVE-2026-62016 | CRITICAL | 9.8 | 0.4% | Oct 29, 2026 | Unauthenticated PHP Object Injection in Gamic <= 1.19 versions. |
| CVE-2026-62015 | CRITICAL | 9.8 | 0.4% | Oct 29, 2026 | Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions. |
| CVE-2026-62014 | CRITICAL | 9.8 | 0.4% | Oct 29, 2026 | Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions. |
| CVE-2026-62013 | CRITICAL | 9.8 | — | Oct 29, 2026 | Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions. |
| CVE-2026-62012 | CRITICAL | 9.8 | — | Oct 29, 2026 | Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions. |
| CVE-2026-62011 | CRITICAL | 9.8 | 0.4% | Oct 29, 2026 | Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions. |
| CVE-2026-62010 | CRITICAL | 9.8 | 0.4% | Oct 29, 2026 | Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions. |
| CVE-2026-62009 | CRITICAL | 9.8 | 0.4% | Oct 29, 2026 | Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions. |
| CVE-2026-62008 | CRITICAL | 9.8 | — | Oct 29, 2026 | Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions. |
| CVE-2026-62006 | CRITICAL | 9.8 | — | Oct 29, 2026 | Unauthenticated PHP Object Injection in Nuts <= 1.12 versions. |
| CVE-2026-62005 | CRITICAL | 9.8 | 0.4% | Oct 29, 2026 | Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions. |
| CVE-2026-62004 | CRITICAL | 9.8 | 0.4% | Oct 29, 2026 | Unauthenticated PHP Object Injection in Motorix <= 1.11 versions. |
| CVE-2026-62003 | CRITICAL | 9.8 | 0.4% | Oct 29, 2026 | Unauthenticated PHP Object Injection in Mission <= 1.22 versions. |
| CVE-2026-62002 | CRITICAL | 9.8 | — | Oct 29, 2026 | Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions. |
| CVE-2026-62001 | CRITICAL | 9.8 | — | Oct 29, 2026 | Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions. |
| CVE-2026-61998 | CRITICAL | 9.8 | 0.5% | Oct 29, 2026 | Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions. |