CVE Vulnerability Database
Search and browse 420,383 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-59176 | HIGH | 7.8 | 0.2% | Oct 28, 2026 | Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the `set_functype_version` MCP tool... |
| CVE-2026-59172 | HIGH | 7.8 | — | Oct 28, 2026 | Joker is a small Clojure interpreter, linter and formatter written in Go. Prior to 1.8.2, `joker --lint <file>` walks up... |
| CVE-2026-59164 | HIGH | 7.1 | 0.2% | Oct 28, 2026 | NORA is a self-hosted artifact registry and pull-through cache. Prior to 0.9.5, `nora-registry` authenticates the token-... |
| CVE-2026-52729 | HIGH | 7.1 | 0.3% | Oct 28, 2026 | Xibo is an open source digital signage platform with a web content management system and Windows display player software... |
| CVE-2026-50541 | MEDIUM | 6.5 | 0.4% | Oct 28, 2026 | Xibo is an open source digital signage platform with a web content management system and Windows display player software... |
| CVE-2026-116390 | HIGH | 7.2 | — | Oct 28, 2026 | Deserialization of Untrusted Data vulnerability in stepasyuk Filter Everything — WordPress & WooCommerce Filter... |
| CVE-2026-116389 | HIGH | 8.8 | — | Oct 28, 2026 | Deserialization of Untrusted Data vulnerability in crossi72 Phoenix Media Rename phoenix-media-rename allows Object Inje... |
| CVE-2026-116078 | HIGH | 8.7 | 0.5% | Oct 28, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit a... |
| CVE-2026-115968 | CRITICAL | 9.8 | — | Oct 28, 2026 | Deserialization of Untrusted Data vulnerability in Ultimate Member Ultimate Member ultimate-member allows Object Injecti... |
| CVE-2026-115603 | HIGH | 8.5 | — | Oct 28, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Advanced Ads GmbH ... |
| CVE-2026-115590 | HIGH | 7.2 | — | Oct 28, 2026 | Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object Injection.This issue affects Do... |
| CVE-2026-105420 | CRITICAL | 9.4 | 0.5% | Oct 28, 2026 | Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scrip... |
| CVE-2026-93516 | MEDIUM | 5.5 | 0.2% | Oct 28, 2026 | A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server b... |
| CVE-2026-93515 | MEDIUM | 6.8 | 0.2% | Oct 28, 2026 | A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 c... |
| CVE-2026-67080 | MEDIUM | 6.5 | 0.3% | Oct 28, 2026 | HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional ... |
| CVE-2026-67079 | MEDIUM | 6.4 | 0.2% | Oct 28, 2026 | HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application withi... |
| CVE-2026-67077 | MEDIUM | 4.2 | 0.1% | Oct 28, 2026 | HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the ap... |
| CVE-2026-67074 | CRITICAL | 9.1 | 0.5% | Oct 28, 2026 | HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the pr... |
| CVE-2026-67073 | HIGH | 8.6 | 0.2% | Oct 28, 2026 | HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an... |
| CVE-2026-55369 | MEDIUM | 6.5 | 0.3% | Oct 28, 2026 | Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /api/token reads the e... |
| CVE-2026-21830 | LOW | 3.7 | 0.2% | Oct 28, 2026 | HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent ... |
| CVE-2026-118040 | HIGH | 7.5 | 0.1% | Oct 28, 2026 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic... |
| CVE-2026-118039 | HIGH | 7.5 | 0.3% | Oct 28, 2026 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulne... |
| CVE-2026-118038 | HIGH | 7.1 | 0.3% | Oct 28, 2026 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the ... |
| CVE-2026-118037 | HIGH | 7.5 | 0.3% | Oct 28, 2026 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop,... |