CVE Vulnerability Database
Search and browse 420,408 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110910 | LOW | 3.7 | 0.3% | Oct 27, 2026 | ### Summary `qs.stringify` with `allowEmptyArrays: true` writes the key of an empty array without encoding it, even t... |
| CVE-2026-106174 | HIGH | 7.5 | 0.3% | Oct 27, 2026 | A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated att... |
| CVE-2026-105946 | MEDIUM | 5.3 | 0.5% | Oct 27, 2026 | Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows rem... |
| CVE-2026-103359 | MEDIUM | 5.3 | 0.1% | Oct 27, 2026 | The PayDunya WooCommerce Payment Gateway WordPress plugin through 1.1.6 does not verify the authenticity of incoming pay... |
| CVE-2026-103325 | LOW | 3.7 | 0.1% | Oct 27, 2026 | The TiendaCrypto para WooCommerce WordPress plugin through 1.2.1 does not correctly verify the authenticity of its payme... |
| CVE-2026-117472 | MEDIUM | 4.3 | 0.3% | Oct 27, 2026 | Psono Server CE && EE versions 4.0.33 through 7.2.3 compared the request path for the bulk-secret-read endpoint with a h... |
| CVE-2026-117471 | MEDIUM | 5.4 | 0.2% | Oct 27, 2026 | Psono Server CE && EE versions 0.1.0 through 7.2.3 accepted a user-controlled host when configuring a personal Duo devic... |
| CVE-2026-117470 | MEDIUM | 6.5 | 0.4% | Oct 27, 2026 | Psono Server CE & EE versions 3.1.0 through 7.2.3 did not consume a stored WebAuthn challenge after assertion verificati... |
| CVE-2026-117469 | MEDIUM | 5.4 | 0.3% | Oct 27, 2026 | Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-r... |
| CVE-2026-117468 | MEDIUM | 6.5 | 0.5% | Oct 27, 2026 | Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a... |
| CVE-2026-111820 | HIGH | 7.2 | 0.2% | Oct 27, 2026 | The Analytics Insights – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Stored Cross-Sit... |
| CVE-2026-103332 | MEDIUM | 5.3 | 0.1% | Oct 27, 2026 | The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of i... |
| CVE-2026-103312 | MEDIUM | 5.3 | 0.2% | Oct 27, 2026 | The Payment Integration Wompi WordPress plugin through 4.0.1 does not verify the authenticity of incoming payment notifi... |
| CVE-2026-88781 | MEDIUM | 6.8 | 0.1% | Oct 27, 2026 | Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an ... |
| CVE-2026-116640 | LOW | 3.5 | 0.2% | Oct 27, 2026 | A flaw has been found in Saruf-Ratul HR-Payroll-Management-System e7cd81477001afdee95b843fd4137894d9418c9f/3fd6f45ead9f8... |
| CVE-2026-116639 | LOW | 3.5 | 0.2% | Oct 27, 2026 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd2... |
| CVE-2026-97028 | — | — | — | Oct 27, 2026 | Rejected reason: Maintainers determined it is not a vulnerability. |
| CVE-2026-116844 | MEDIUM | 4.8 | 0.1% | Oct 27, 2026 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only t... |
| CVE-2026-116843 | HIGH | 8.8 | 0.4% | Oct 27, 2026 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defini... |
| CVE-2026-116842 | MEDIUM | 6.1 | 0.1% | Oct 27, 2026 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup ... |
| CVE-2026-116841 | MEDIUM | 5.5 | 0.1% | Oct 27, 2026 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_f... |
| CVE-2026-116840 | MEDIUM | 6.1 | 0.1% | Oct 27, 2026 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-... |
| CVE-2026-116839 | HIGH | 7.1 | 0.1% | Oct 27, 2026 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) ... |
| CVE-2026-116838 | HIGH | 8.8 | 0.4% | Oct 27, 2026 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) ... |
| CVE-2026-116837 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in ... |