CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-119050 | HIGH | 8.1 | 0.4% | Oct 29, 2026 | Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary... |
| CVE-2026-119049 | HIGH | 7.6 | — | Oct 29, 2026 | FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another us... |
| CVE-2026-119048 | MEDIUM | 4.2 | — | Oct 29, 2026 | JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that ... |
| CVE-2026-118425 | MEDIUM | 6.8 | 0.2% | Oct 29, 2026 | A flaw was found in the secure-redirect-uris-enforcer client policy of Keycloak, an identity and access management solut... |
| CVE-2026-116857 | MEDIUM | 6.5 | — | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmar... |
| CVE-2026-116402 | MEDIUM | 5.3 | — | Oct 29, 2026 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force SureForm... |
| CVE-2026-116399 | HIGH | 8.8 | — | Oct 29, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in InstaWP InstaWP Connect instawp-connect allows Cross Site Request For... |
| CVE-2026-113697 | MEDIUM | 4.8 | — | Oct 29, 2026 | Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticate... |
| CVE-2026-113696 | MEDIUM | 5.3 | — | Oct 29, 2026 | Improper authorization in the SmartIT change approval feature of BMC IT Service Management Suite versions 25.3.01, 25.4.... |
| CVE-2026-113695 | MEDIUM | 4.8 | — | Oct 29, 2026 | Reflected cross-site scripting in the SmartIT inline-image attachment feature of BMC IT Service Management Suite version... |
| CVE-2026-113694 | MEDIUM | 5.3 | — | Oct 29, 2026 | Improper authorization in the SmartIT user attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.... |
| CVE-2026-113693 | MEDIUM | 5.3 | — | Oct 29, 2026 | Exposure of sensitive information in the SmartIT system-account settings of BMC IT Service Management Suite versions 25.... |
| CVE-2026-113692 | MEDIUM | 6.9 | — | Oct 29, 2026 | Path traversal in the SmartIT file-management feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and ... |
| CVE-2026-113691 | MEDIUM | 5.1 | — | Oct 29, 2026 | Stored cross-site scripting in the SmartIT knowledge-article feature of BMC IT Service Management Suite versions 25.3.01... |
| CVE-2019-25781 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows r... |
| CVE-2026-93011 | MEDIUM | 5.3 | 0.6% | Oct 29, 2026 | A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC validator can write a fe... |
| CVE-2026-93008 | MEDIUM | 6.8 | 0.1% | Oct 29, 2026 | A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can cache records for the CNAME targ... |
| CVE-2026-93007 | MEDIUM | 5.3 | 0.4% | Oct 29, 2026 | A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and does not set a receive t... |
| CVE-2026-93006 | MEDIUM | 6.8 | 0.3% | Oct 29, 2026 | A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is... |
| CVE-2026-56056 | MEDIUM | 6.5 | — | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid The... |
| CVE-2026-52709 | MEDIUM | 6.5 | — | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Video Gal... |
| CVE-2026-49142 | HIGH | 8.8 | 0.4% | Oct 29, 2026 | OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerability in the Syndromic Surveillance module that all... |
| CVE-2026-48196 | MEDIUM | 6.5 | — | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kaliforms Kali For... |
| CVE-2026-42703 | MEDIUM | 6.5 | — | Oct 29, 2026 | Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access C... |
| CVE-2026-39741 | MEDIUM | 5.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in RelyWP Simple Cloudflare Turnstile simple-cloudflare-turnstile allows Exploiting ... |