CVE Vulnerability Database
Search and browse 420,405 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-82983 | LOW | 3.3 | 0.1% | Oct 27, 2026 | The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user... |
| CVE-2026-77173 | MEDIUM | 4.3 | 0.2% | Oct 27, 2026 | A user could create a docx or odt file with a # in the filename with confidential information such as a credit card numb... |
| CVE-2026-77172 | MEDIUM | 5.3 | 0.3% | Oct 27, 2026 | App passwords were allowed to bypass password confirmation on sensitive endpoints. |
| CVE-2026-77171 | LOW | 3.5 | 0.2% | Oct 27, 2026 | A public shared collective always allowed recipients of the link to create pages. |
| CVE-2026-77167 | HIGH | 7.5 | 0.4% | Oct 27, 2026 | Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. Th... |
| CVE-2026-67400 | LOW | 3.5 | 0.2% | Oct 27, 2026 | A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or g... |
| CVE-2026-57201 | HIGH | 7.5 | 0.7% | Oct 27, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-57198 | LOW | 2.3 | 0.8% | Oct 27, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated atta... |
| CVE-2026-57197 | HIGH | 7.7 | 0.5% | Oct 27, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-57194 | MEDIUM | 5.9 | 0.4% | Oct 27, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-57189 | LOW | 2.3 | 0.7% | Oct 27, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated atta... |
| CVE-2026-57185 | MEDIUM | 6.5 | 0.5% | Oct 27, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-54462 | MEDIUM | 6.5 | 0.4% | Oct 27, 2026 | Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the... |
| CVE-2026-48380 | MEDIUM | 5.5 | 0.2% | Oct 27, 2026 | Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memo... |
| CVE-2026-48379 | HIGH | 7.8 | 0.2% | Oct 27, 2026 | Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code exe... |
| CVE-2026-48360 | CRITICAL | 9.6 | 0.4% | Oct 27, 2026 | Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could resul... |
| CVE-2026-117514 | HIGH | 7.3 | 0.4% | Oct 27, 2026 | A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the ... |
| CVE-2026-117513 | HIGH | 7.3 | 0.3% | Oct 27, 2026 | A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the fil... |
| CVE-2026-117512 | HIGH | 7.3 | 0.4% | Oct 27, 2026 | A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee... |
| CVE-2026-116675 | HIGH | 8.5 | 0.3% | Oct 27, 2026 | TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates ... |
| CVE-2026-116674 | MEDIUM | 6.5 | 0.3% | Oct 27, 2026 | systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/netw... |
| CVE-2026-116673 | LOW | 3.3 | 0.1% | Oct 27, 2026 | systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) im... |
| CVE-2026-116672 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientC... |
| CVE-2026-114598 | HIGH | 7.5 | 0.3% | Oct 27, 2026 | In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can ... |
| CVE-2026-114597 | HIGH | 7.5 | 0.3% | Oct 27, 2026 | In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can ... |