CVE Vulnerability Database
Search and browse 420,497 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-116461 | MEDIUM | 4.3 | 0.2% | Oct 26, 2026 | A vulnerability was determined in Omega Solution Restro POS up to 20261026. This impacts an unknown function of the file... |
| CVE-2026-116408 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery P... |
| CVE-2026-116400 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Button Bl... |
| CVE-2026-116398 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Content S... |
| CVE-2026-116385 | LOW | 3.5 | — | Oct 26, 2026 | A security vulnerability has been detected in Bdtask Garage 24 Garage Management Software 1.0. This issue affects some u... |
| CVE-2026-115966 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Typing Te... |
| CVE-2026-115923 | MEDIUM | 6.5 | 0.3% | Oct 26, 2026 | Backstage is an open framework for building developer portals. Prior to 3.9.2 and from 4.0.0 until 4.0.2, DefaultCatalog... |
| CVE-2026-115922 | MEDIUM | 6.2 | 0.1% | Oct 26, 2026 | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, _unpack_... |
| CVE-2026-115921 | MEDIUM | 6.2 | 0.1% | Oct 26, 2026 | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0, ... |
| CVE-2026-115920 | MEDIUM | 6.2 | — | Oct 26, 2026 | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.2.1 until 1.22.0, ... |
| CVE-2026-115919 | MEDIUM | 6.2 | — | Oct 26, 2026 | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, RNNShape... |
| CVE-2026-115918 | MEDIUM | 6.5 | 0.4% | Oct 26, 2026 | vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint ... |
| CVE-2026-115917 | MEDIUM | 4.7 | 0.2% | Oct 26, 2026 | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the OpenAI-compatible server configu... |
| CVE-2026-115916 | MEDIUM | 6.5 | 0.3% | Oct 26, 2026 | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes max_t... |
| CVE-2026-115915 | CRITICAL | 9.8 | 0.6% | Oct 26, 2026 | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-control... |
| CVE-2026-115914 | MEDIUM | 6.5 | 0.4% | Oct 26, 2026 | vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-... |
| CVE-2026-115804 | MEDIUM | 6.4 | — | Oct 26, 2026 | HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may a... |
| CVE-2026-112839 | MEDIUM | 4.3 | — | Oct 26, 2026 | Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coupons allows Exploitin... |
| CVE-2026-111404 | LOW | 3.7 | — | Oct 26, 2026 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in VillaTheme ... |
| CVE-2026-10757 | CRITICAL | 9.8 | 0.4% | Oct 26, 2026 | There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may all... |
| CVE-2026-105765 | HIGH | 7.5 | 0.2% | Oct 26, 2026 | HashiCorp Consul and Consul Enterprise 1.17.0 up to 2.0.4 are vulnerable to an authorization bypass in the agent's servi... |
| CVE-2026-105626 | HIGH | 7.5 | — | Oct 26, 2026 | HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that may allow an unauthent... |
| CVE-2026-105608 | HIGH | 8.8 | — | Oct 26, 2026 | HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh proxy registration. Thi... |
| CVE-2026-102649 | CRITICAL | 9.9 | 0.5% | Oct 26, 2026 | Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes operator. Prior to 0.13.0, `POST /api/webhoo... |
| CVE-2026-82390 | LOW | 3.7 | 0.2% | Oct 26, 2026 | The Espressif AES driver drivers/crypto/crypto_esp32_aes.c advertises a multi-session cipher API — it hands out up to CO... |