CVE Vulnerability Database
Search and browse 420,407 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-113644 | MEDIUM | 5.5 | 0.2% | Oct 27, 2026 | In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certifi... |
| CVE-2026-112362 | CRITICAL | 9.1 | 0.4% | Oct 27, 2026 | @fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versions 4.0.5 through 4.0.8, when ... |
| CVE-2026-10756 | HIGH | 7.7 | 0.2% | Oct 27, 2026 | TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access s... |
| CVE-2026-10752 | MEDIUM | 4.8 | 0.3% | Oct 27, 2026 | The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to authorization bypass in all versions up to, a... |
| CVE-2026-109995 | HIGH | 7.2 | 0.2% | Oct 27, 2026 | The Advanced Views – Display Framework for Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site... |
| CVE-2026-106087 | HIGH | 8.7 | 0.2% | Oct 27, 2026 | TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read... |
| CVE-2026-105323 | MEDIUM | 6.1 | 0.2% | Oct 27, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Kulga Software and... |
| CVE-2026-102800 | HIGH | 8.7 | 0.4% | Oct 27, 2026 | Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0 - The “was this article ... |
| CVE-2026-117541 | MEDIUM | 5.3 | — | Oct 27, 2026 | svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught exception vulnerability that allows attackers to crash calle... |
| CVE-2026-117540 | HIGH | 7.5 | 0.4% | Oct 27, 2026 | svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize() that repeatedl... |
| CVE-2026-117539 | LOW | 3.5 | 0.2% | Oct 27, 2026 | darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow att... |
| CVE-2026-117538 | MEDIUM | 4.1 | 0.2% | Oct 27, 2026 | REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend packages API, where the func... |
| CVE-2026-117537 | MEDIUM | 4.1 | — | Oct 27, 2026 | REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inje... |
| CVE-2026-117536 | HIGH | 8.8 | 0.1% | Oct 27, 2026 | REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the backend user administration page (users/... |
| CVE-2026-117535 | MEDIUM | 6.1 | 0.2% | Oct 27, 2026 | REDAXO before 5.21.3 contains a reflected cross-site scripting vulnerability in the backend media pool detail page, wher... |
| CVE-2026-117534 | MEDIUM | 5.4 | 0.1% | Oct 27, 2026 | REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the structure/history plugin that allows att... |
| CVE-2026-117533 | MEDIUM | 4.4 | — | Oct 27, 2026 | REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site scripting vulnerability because rex_media_service moves up... |
| CVE-2026-117532 | CRITICAL | 9.8 | 0.7% | Oct 27, 2026 | REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin tha... |
| CVE-2026-117530 | MEDIUM | 6.7 | 0.1% | Oct 27, 2026 | In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted command... |
| CVE-2026-117466 | HIGH | 8.6 | 0.2% | Oct 27, 2026 | In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full s... |
| CVE-2026-117341 | HIGH | 7.7 | 0.2% | Oct 27, 2026 | In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. Wh... |
| CVE-2026-116900 | MEDIUM | 5.4 | 0.1% | Oct 27, 2026 | REDAXO before 5.21.4 contains a stored cross-site scripting vulnerability that allows content editors to inject HTML by ... |
| CVE-2026-116899 | MEDIUM | 6.5 | 0.2% | Oct 27, 2026 | REDAXO before 5.21.4 contains a broken access control vulnerability that allows authenticated editors to modify slices i... |
| CVE-2026-116898 | HIGH | 7.1 | — | Oct 27, 2026 | REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk move that checks only target ... |
| CVE-2026-116897 | MEDIUM | 6.5 | 0.2% | Oct 27, 2026 | REDAXO core before 5.21.4 contains a missing authorization vulnerability in the structure/version and structure/history ... |