CVE Vulnerability Database
Search and browse 420,409 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-116813 | MEDIUM | 6.5 | 0.2% | Oct 27, 2026 | OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion that allows project-re... |
| CVE-2026-116812 | MEDIUM | 6.5 | 0.2% | Oct 27, 2026 | OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort.service.ts that allows pr... |
| CVE-2026-116811 | HIGH | 8.8 | 0.5% | Oct 27, 2026 | OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allows a project member ... |
| CVE-2026-116810 | MEDIUM | 5.3 | 0.3% | Oct 27, 2026 | OpenPanel before 3.0.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read any ... |
| CVE-2026-116809 | MEDIUM | 5.3 | 0.2% | Oct 27, 2026 | OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC procedure that allows unaut... |
| CVE-2026-116808 | HIGH | 7.2 | 0.4% | Oct 27, 2026 | OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to read cross-tenant data... |
| CVE-2026-116807 | MEDIUM | 6.5 | 0.3% | Oct 27, 2026 | OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to bypass tenant scoping ... |
| CVE-2026-116806 | MEDIUM | 5.4 | 0.2% | Oct 27, 2026 | OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC mutation that allow... |
| CVE-2026-116805 | MEDIUM | 4.3 | 0.2% | Oct 27, 2026 | OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain... |
| CVE-2026-116804 | MEDIUM | 6.1 | 0.2% | Oct 27, 2026 | DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers preserve template expression... |
| CVE-2026-116803 | MEDIUM | 6.1 | 0.2% | Oct 27, 2026 | DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed... |
| CVE-2026-116802 | MEDIUM | 6.1 | 0.2% | Oct 27, 2026 | DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypass the SMIL attribute... |
| CVE-2026-116801 | MEDIUM | 4.3 | 0.3% | Oct 27, 2026 | Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object reference in $relatedTo ... |
| CVE-2026-116800 | MEDIUM | 6.2 | 0.5% | Oct 27, 2026 | WWBN AVideo before 29.5.0 contains a local file inclusion vulnerability that allows unauthenticated attackers to include... |
| CVE-2026-116604 | MEDIUM | 6.5 | 0.6% | Oct 27, 2026 | A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown fun... |
| CVE-2026-116603 | MEDIUM | 4.7 | 0.3% | Oct 27, 2026 | A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file adm... |
| CVE-2026-111422 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated `environment` para... |
| CVE-2026-76654 | MEDIUM | 5.8 | 0.4% | Oct 26, 2026 | An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a sym... |
| CVE-2026-2270 | MEDIUM | 5.9 | 0.3% | Oct 26, 2026 | A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions... |
| CVE-2026-116602 | MEDIUM | 6.5 | 0.5% | Oct 26, 2026 | A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink o... |
| CVE-2026-116556 | LOW | 2.4 | 0.2% | Oct 26, 2026 | A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/componen... |
| CVE-2026-116555 | LOW | 2.4 | 0.2% | Oct 26, 2026 | A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-f... |
| CVE-2026-116554 | LOW | 3.5 | 0.3% | Oct 26, 2026 | A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk of the file argilla... |
| CVE-2026-77924 | — | — | — | Oct 26, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-66045 | — | — | — | Oct 26, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |