CVE Vulnerability Database
Search and browse 420,408 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-116836 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scr... |
| CVE-2026-116829 | MEDIUM | 6.6 | 0.1% | Oct 27, 2026 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers... |
| CVE-2026-116816 | HIGH | 7.8 | 0.1% | Oct 27, 2026 | llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allo... |
| CVE-2026-116623 | HIGH | 7.3 | 0.4% | Oct 27, 2026 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of t... |
| CVE-2026-116620 | HIGH | 7.3 | 0.3% | Oct 27, 2026 | A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStri... |
| CVE-2026-116608 | MEDIUM | 5.4 | 0.1% | Oct 27, 2026 | A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function... |
| CVE-2026-116605 | MEDIUM | 5.3 | 0.3% | Oct 27, 2026 | A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function... |
| CVE-2025-71439 | MEDIUM | 5.5 | 0.1% | Oct 27, 2026 | llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows a... |
| CVE-2024-58400 | HIGH | 8.2 | 0.4% | Oct 27, 2026 | llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal t... |
| CVE-2024-58399 | MEDIUM | 6.1 | 0.1% | Oct 27, 2026 | llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read ... |
| CVE-2026-116828 | MEDIUM | 4.9 | 0.3% | Oct 27, 2026 | YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but placed... |
| CVE-2026-116827 | MEDIUM | 6.8 | 0.3% | Oct 27, 2026 | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile() f... |
| CVE-2026-116826 | MEDIUM | 6.8 | 0.2% | Oct 27, 2026 | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that all... |
| CVE-2026-116825 | MEDIUM | 6.5 | 0.2% | Oct 27, 2026 | YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never validate... |
| CVE-2026-116824 | MEDIUM | 6.1 | 0.2% | Oct 27, 2026 | YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that allo... |
| CVE-2026-116823 | MEDIUM | 6.1 | 0.2% | Oct 27, 2026 | YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in... |
| CVE-2026-116822 | MEDIUM | 5.3 | 0.2% | Oct 27, 2026 | YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers t... |
| CVE-2026-116821 | MEDIUM | 6.5 | 0.3% | Oct 27, 2026 | YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which interpolates usernames into S... |
| CVE-2026-116820 | MEDIUM | 5.3 | 0.2% | Oct 27, 2026 | YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers t... |
| CVE-2026-116819 | HIGH | 8.5 | 0.3% | Oct 27, 2026 | OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain... |
| CVE-2026-116818 | HIGH | 8.2 | 0.4% | Oct 27, 2026 | OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that allows remote attackers t... |
| CVE-2026-116817 | MEDIUM | 6.5 | 0.3% | Oct 27, 2026 | OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access t... |
| CVE-2026-116815 | MEDIUM | 4.3 | 0.2% | Oct 27, 2026 | OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that allows authenticated projec... |
| CVE-2026-116814 | MEDIUM | 6.5 | 0.3% | Oct 27, 2026 | OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connection URLs and email tem... |
| CVE-2026-116813 | MEDIUM | 6.5 | 0.2% | Oct 27, 2026 | OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion that allows project-re... |