CVE Vulnerability Database
Search and browse 420,405 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-116685 | MEDIUM | 5.9 | 0.4% | Oct 27, 2026 | The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.... |
| CVE-2026-116684 | MEDIUM | 6.8 | 0.4% | Oct 27, 2026 | The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.... |
| CVE-2026-112355 | HIGH | 7.5 | 0.3% | Oct 27, 2026 | The MembershipWorks plugin for WordPress before 6.17 contains an information disclosure vulnerability that allows unauth... |
| CVE-2026-112352 | CRITICAL | 9.8 | 1.3% | Oct 27, 2026 | Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote att... |
| CVE-2026-112351 | HIGH | 8.8 | 2.7% | Oct 27, 2026 | Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allow... |
| CVE-2026-112350 | HIGH | 7.5 | 0.9% | Oct 27, 2026 | Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unau... |
| CVE-2026-103995 | LOW | 2 | 0.4% | Oct 27, 2026 | Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpret... |
| CVE-2026-118180 | HIGH | 7.5 | 0.2% | Oct 27, 2026 | When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server's login response wit... |
| CVE-2026-118179 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | Clicking a news: or snews: link that referenced a message-ID made Thunderbird connect, without asking, to the host and p... |
| CVE-2026-118178 | MEDIUM | 5.7 | 0.2% | Oct 27, 2026 | A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscription... |
| CVE-2026-118177 | CRITICAL | 9.1 | 0.2% | Oct 27, 2026 | When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, Thund... |
| CVE-2026-118176 | HIGH | 8.1 | 0.2% | Oct 27, 2026 | Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed ... |
| CVE-2026-118175 | HIGH | 7.5 | 0.2% | Oct 27, 2026 | When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different me... |
| CVE-2026-118174 | MEDIUM | 6.5 | 0.2% | Oct 27, 2026 | When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's con... |
| CVE-2026-118173 | MEDIUM | 6.1 | 0.3% | Oct 27, 2026 | MISP Guard, a proxy that enforces security policies on MISP feed data, contained an incomplete validation check for requ... |
| CVE-2026-118172 | MEDIUM | 6.1 | 0.2% | Oct 27, 2026 | The strapi/strapi (Core Admin / Webhook Runner) package is vulnerable to a semi-blind SSRF via a webhook follow-redirect... |
| CVE-2026-118171 | MEDIUM | 6.5 | 0.1% | Oct 27, 2026 | The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. T... |
| CVE-2026-118170 | CRITICAL | 9.1 | 0.1% | Oct 27, 2026 | The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made w... |
| CVE-2026-116683 | HIGH | 7.1 | 0.4% | Oct 27, 2026 | CTFer.io's CTFd Terraform Provider manages CTFd resources as code. From 0.1.5 until 2.8.2, ctfd_team.password is stored ... |
| CVE-2026-115413 | HIGH | 7.8 | 0.1% | Oct 27, 2026 | Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allo... |
| CVE-2026-88812 | HIGH | 7.8 | 0.2% | Oct 27, 2026 | A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached ... |
| CVE-2026-87086 | HIGH | 7.5 | 0.4% | Oct 27, 2026 | Tanium addressed a denial of service vulnerability in Provision. |
| CVE-2026-87085 | MEDIUM | 6.3 | 0.2% | Oct 27, 2026 | Tanium addressed a SQL injection vulnerability in Provision. |
| CVE-2026-57202 | HIGH | 8.1 | 0.4% | Oct 27, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-57188 | HIGH | 7.1 | 0.5% | Oct 27, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |