CVE Vulnerability Database
Search and browse 420,497 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-115598 | MEDIUM | 5.3 | — | Oct 26, 2026 | Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access C... |
| CVE-2026-115597 | MEDIUM | 5.4 | — | Oct 26, 2026 | Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access C... |
| CVE-2026-115418 | HIGH | 7.3 | 0.2% | Oct 26, 2026 | SQL injection in the database-query custom resource handlers in the Amazon Web Services (AWS) Cloud Development Kit (CDK... |
| CVE-2026-114710 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery P... |
| CVE-2026-107091 | HIGH | 7.8 | 0.2% | Oct 26, 2026 | An issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code vi... |
| CVE-2026-106677 | HIGH | 7.1 | 0.2% | Oct 26, 2026 | Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl. An authenticated user can view conversati... |
| CVE-2026-106676 | MEDIUM | 5.4 | 0.2% | Oct 26, 2026 | qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to w... |
| CVE-2013-10077 | MEDIUM | 5.3 | 0.4% | Oct 26, 2026 | A weakness has been identified in OctoPrint 1.0.0. This impacts the function getSettings of the file src/octoprint/serve... |
| CVE-2026-93846 | LOW | 3.8 | 0.2% | Oct 26, 2026 | Mattermost versions 11.7.x <= 11.7.10 fail to restrict which built-in roles can be assigned to a team member via the API... |
| CVE-2026-85297 | HIGH | 7.7 | 0.3% | Oct 26, 2026 | Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to interce... |
| CVE-2026-65226 | — | — | — | Oct 26, 2026 | Rejected reason: This CVE ID has been rejected by runZero as unused. |
| CVE-2026-65222 | — | — | — | Oct 26, 2026 | Rejected reason: The reported issue could not be reproduced, and the affected products are end-of-life. This CVE ID is u... |
| CVE-2026-65221 | — | — | — | Oct 26, 2026 | Rejected reason: The reported issue was assessed as intended functionality. This CVE ID is unused by the CNA. |
| CVE-2026-65218 | — | — | — | Oct 26, 2026 | Rejected reason: The reported issue is tracked under CVE-2026-18451. This CVE ID is rejected as a duplicate. |
| CVE-2026-65217 | — | — | — | Oct 26, 2026 | Rejected reason: The reported issue could not be reproduced. This CVE ID is unused by the CNA. |
| CVE-2026-65216 | — | — | — | Oct 26, 2026 | Rejected reason: The reported issue is tracked under CVE-2026-18450. This CVE ID is rejected as a duplicate. |
| CVE-2026-65215 | — | — | — | Oct 26, 2026 | Rejected reason: The reported issue could not be reproduced. This CVE ID is unused by the CNA. |
| CVE-2026-65214 | — | — | — | Oct 26, 2026 | Rejected reason: The reported issue is tracked under CVE-2026-18449. This CVE ID is rejected as a duplicate. |
| CVE-2026-65212 | — | — | — | Oct 26, 2026 | Rejected reason: The reported issue was assessed as intended functionality. This CVE ID is unused by the CNA. |
| CVE-2026-65203 | — | — | — | Oct 26, 2026 | Rejected reason: The reported issue could not be reproduced. This CVE ID is unused by the CNA. |
| CVE-2026-65202 | — | — | — | Oct 26, 2026 | Rejected reason: The reported issue was assessed as intended functionality. This CVE ID is unused by the CNA. |
| CVE-2026-116544 | LOW | 3.7 | — | Oct 26, 2026 | Open5GS 2.6.1 through 2.8.0 contains an out-of-bounds read vulnerability in parse_scheme_output() in lib/sbi/conv.c duri... |
| CVE-2026-116543 | HIGH | 7.5 | 0.4% | Oct 26, 2026 | Open5GS 1.3.0 through 2.8.0 contains a heap out-of-bounds write vulnerability in parse_multipart() that allows unauthent... |
| CVE-2026-116542 | MEDIUM | 5.3 | 0.2% | Oct 26, 2026 | Netty netty-tcnative before 2.0.84.Final contains an SNI hostname spoofing vulnerability that allows remote unauthentica... |
| CVE-2026-116541 | MEDIUM | 5.9 | — | Oct 26, 2026 | Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcn_write_to_bytebuffer BIO w... |