CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-61572 | HIGH | 8.6 | 0.3% | Oct 28, 2026 | AVideo is a video-sharing Platform. Before the initial remediation attempt in 8.1.0, `url_get_contents` in `objects/func... |
| CVE-2026-61571 | HIGH | 7.3 | 0.3% | Oct 28, 2026 | AVideo is a video-sharing Platform. Prior to 8.1.0, the encoder lacks a global authentication layer and exposes control ... |
| CVE-2026-61569 | HIGH | 7.5 | 0.3% | Oct 28, 2026 | AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated streamer login at `objects/login.json.php` passe... |
| CVE-2026-61567 | CRITICAL | 10 | 0.5% | Oct 28, 2026 | AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint `view/videosListToLive.php` accepts an a... |
| CVE-2026-61564 | CRITICAL | 10 | 0.5% | Oct 28, 2026 | AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installer endpoint `install/checkConfiguration.p... |
| CVE-2026-61546 | HIGH | 8.8 | 0.2% | Oct 28, 2026 | AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the Anki flashcard appli... |
| CVE-2026-57448 | MEDIUM | 6.2 | 0.3% | Oct 28, 2026 | Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the adm... |
| CVE-2026-54455 | HIGH | 7.6 | 0.2% | Oct 28, 2026 | OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior t... |
| CVE-2026-54453 | HIGH | 7.2 | 0.4% | Oct 28, 2026 | OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior t... |
| CVE-2026-118804 | HIGH | 7.5 | 0.2% | Oct 28, 2026 | Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthenticated attackers to ... |
| CVE-2026-118803 | HIGH | 7.5 | 0.4% | Oct 28, 2026 | Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability that allows anonymous... |
| CVE-2026-118757 | MEDIUM | 6.5 | 0.2% | Oct 28, 2026 | PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 contains a missing authorization vulnerab... |
| CVE-2026-118756 | MEDIUM | 5.5 | 0.1% | Oct 28, 2026 | gopass before 1.17.0 contains a path traversal vulnerability in the filesystem storage backend that allows attackers to ... |
| CVE-2026-118755 | HIGH | 7.2 | 1.4% | Oct 28, 2026 | Volmarg Personal Management System through 2.1.0 contains an OS command injection vulnerability that allows authenticate... |
| CVE-2026-118754 | MEDIUM | 5.3 | 0.2% | Oct 28, 2026 | Dolibarr ERP CRM before 24.0.2 contains a missing authorization vulnerability in htdocs/public/recruitment/view.php that... |
| CVE-2026-118753 | HIGH | 7.8 | 0.1% | Oct 28, 2026 | FreeImage through 3.18.0 and the danoli3 FreeImage fork before 3.19.25 contain a heap buffer overflow vulnerability in P... |
| CVE-2026-118752 | HIGH | 7.8 | 0.2% | Oct 28, 2026 | FreeImage through 3.18.0 and the danoli3 FreeImage fork before 3.19.22 contain a heap buffer overflow vulnerability in t... |
| CVE-2026-118694 | HIGH | 7.5 | 0.5% | Oct 28, 2026 | python-markdown2 through 2.5.5 contains a denial of service vulnerability that allows remote users to exhaust CPU by sub... |
| CVE-2026-118693 | MEDIUM | 4.7 | 0.1% | Oct 28, 2026 | CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::_create_image_from_xml that trus... |
| CVE-2026-118692 | HIGH | 7 | 0.6% | Oct 28, 2026 | CherryTree through 1.7.2 contains an OS command injection vulnerability in CtActions::link_clicked that allows attackers... |
| CVE-2026-118691 | LOW | 3.7 | 0.3% | Oct 28, 2026 | xianyu-auto-reply-fix through 2.0.7 contains a missing authorization vulnerability in the POST /send-message endpoint th... |
| CVE-2026-118690 | CRITICAL | 9.8 | 0.7% | Oct 28, 2026 | Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenticated remote attacke... |
| CVE-2026-118689 | HIGH | 7.5 | 0.5% | Oct 28, 2026 | OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in OvtPacket::LoadHeader() that allows unauthe... |
| CVE-2026-118682 | HIGH | 7.5 | 0.3% | Oct 28, 2026 | KaringX ClashMi through 1.0.32.1801 disables TLS certificate validation by default in the HttpUtils helper, allowing att... |
| CVE-2026-118669 | HIGH | 8.4 | 0.3% | Oct 28, 2026 | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, the client_credentials... |