CVE Vulnerability Database
Search and browse 420,382 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-66088 | CRITICAL | 9.4 | 0.7% | Oct 29, 2026 | In openEQUELLA before 2026.1, the system.execute() function available to the scripting engine runs supplied operating sy... |
| CVE-2026-16889 | MEDIUM | 4.8 | 0.3% | Oct 29, 2026 | In openEQUELLA before 2026.1, the pre-login notice image upload endpoint (PUT /api/preloginnotice/image/{name}) does not... |
| CVE-2026-114173 | MEDIUM | 5.3 | 0.3% | Oct 29, 2026 | The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefron... |
| CVE-2026-113409 | MEDIUM | 4.8 | 0.2% | Oct 29, 2026 | The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to store... |
| CVE-2026-113387 | HIGH | 8.6 | 0.3% | Oct 29, 2026 | The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secre... |
| CVE-2026-21157 | HIGH | 8.3 | 0.1% | Oct 29, 2026 | Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activ... |
| CVE-2026-118590 | MEDIUM | 5.3 | 0.4% | Oct 29, 2026 | A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_... |
| CVE-2026-113957 | MEDIUM | 5.6 | 0.1% | Oct 29, 2026 | An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content ... |
| CVE-2026-118589 | MEDIUM | 5.3 | 0.4% | Oct 29, 2026 | A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown function of the file meshio/_vtk_42... |
| CVE-2026-118586 | MEDIUM | 5.3 | 0.3% | Oct 29, 2026 | A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the function find_feeds of the fi... |
| CVE-2026-118585 | LOW | 3.5 | 0.2% | Oct 29, 2026 | A vulnerability was identified in configuroweb inventariobasico c9377cdba474deb3eb5a0704d197b5733af16b47/f9db0c0a04d79ad... |
| CVE-2026-86983 | MEDIUM | 5.9 | 0.2% | Oct 28, 2026 | A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API withou... |
| CVE-2026-85749 | HIGH | 8.1 | 0.3% | Oct 28, 2026 | MailWatch for MailScanner is a web-based front-end to MailScanner. Prior to 1.2.27, any authenticated MailWatch user, in... |
| CVE-2026-82411 | MEDIUM | 6.5 | 0.3% | Oct 28, 2026 | Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2... |
| CVE-2026-75520 | MEDIUM | 5.4 | 0.3% | Oct 28, 2026 | Domoticz is a free, open source home automation system for Linux, Windows, macOS, and Raspberry Pi. Prior to 2026.3, the... |
| CVE-2026-55561 | MEDIUM | 5.3 | 0.3% | Oct 28, 2026 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2-beta-... |
| CVE-2026-118579 | CRITICAL | 9.8 | 0.8% | Oct 28, 2026 | A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark... |
| CVE-2026-118578 | MEDIUM | 4.3 | 0.2% | Oct 28, 2026 | A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown ... |
| CVE-2026-118577 | MEDIUM | 6.3 | 0.2% | Oct 28, 2026 | A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an unknown function of the c... |
| CVE-2026-111575 | — | — | — | Oct 28, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-111486 | — | — | — | Oct 28, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-111478 | — | — | — | Oct 28, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-93851 | HIGH | 8 | 0.3% | Oct 28, 2026 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail to validate the target post ID in the Age... |
| CVE-2026-61575 | MEDIUM | 4.7 | 0.2% | Oct 28, 2026 | AVideo is a video-sharing Platform. Prior to 8.1.0, `view/queue.php` uses `pathinfo` on the caller-controlled `fileURI` ... |
| CVE-2026-61573 | MEDIUM | 6.1 | 0.3% | Oct 28, 2026 | AVideo is a video-sharing Platform. Prior to 8.1.0, the anonymous login interface reflects request values into HTML and ... |