CVE Vulnerability Database
Search and browse 420,515 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-115930 | MEDIUM | 6.8 | 0.1% | Oct 26, 2026 | The MongoDB Shell (mongosh) relies on Node.js as a third-party runtime that carries its own TLS root certificate store. ... |
| CVE-2026-112345 | HIGH | 8.1 | — | Oct 26, 2026 | TTLock Android application before v9.8.260718 and associated smart-lock firmware contain a hardcoded static AES key vuln... |
| CVE-2026-110748 | MEDIUM | 5.5 | 0.2% | Oct 26, 2026 | This issue affects Apache SIS from version 0.7 through 1.6 inclusive. When a data file contains links to other files, Ap... |
| CVE-2026-110733 | MEDIUM | 5.4 | — | Oct 26, 2026 | Vulnerability in the SQL storage module of Apache SIS. When sorting a stream of features, the clause is copied after ORD... |
| CVE-2026-106781 | HIGH | 7.8 | 0.2% | Oct 26, 2026 | An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker ... |
| CVE-2026-97200 | HIGH | 8.2 | — | Oct 26, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in hackney_conn in benoitc hackney allows a malicious... |
| CVE-2026-59107 | CRITICAL | 9.8 | 0.4% | Oct 26, 2026 | A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust ... |
| CVE-2026-59106 | CRITICAL | 9.8 | — | Oct 26, 2026 | A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of us... |
| CVE-2026-116516 | MEDIUM | 6.5 | — | Oct 26, 2026 | Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before slicing which allows an... |
| CVE-2026-116492 | MEDIUM | 6.5 | 0.2% | Oct 26, 2026 | Frappe CRM app before 1.89.1 contains a missing authorization vulnerability that allows authenticated low-privileged use... |
| CVE-2026-116488 | MEDIUM | 6.8 | 0.4% | Oct 26, 2026 | NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio, ... |
| CVE-2026-116487 | MEDIUM | 4.6 | 0.3% | Oct 26, 2026 | NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-of-bounds read vulnerability in... |
| CVE-2026-116486 | MEDIUM | 4.5 | — | Oct 26, 2026 | Objenesis before 3.6 contains a type confusion vulnerability that allows code in one class loader to substitute objects ... |
| CVE-2026-116485 | CRITICAL | 9.8 | 2.3% | Oct 26, 2026 | danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify ... |
| CVE-2026-116283 | MEDIUM | 4.3 | 0.3% | Oct 26, 2026 | A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /profiles of the comp... |
| CVE-2026-116282 | MEDIUM | 4.3 | — | Oct 26, 2026 | A security flaw has been discovered in Kameleo up to 5.3.1. Affected by this issue is the function CookieController.List... |
| CVE-2026-116281 | LOW | 3.3 | 0.1% | Oct 26, 2026 | A vulnerability was identified in Kameleo up to 5.0.1.26. Affected by this vulnerability is the function ListProfiles of... |
| CVE-2026-116280 | MEDIUM | 5.5 | 0.2% | Oct 26, 2026 | A vulnerability was determined in Kameleo up to 5.0.1.26. Affected is the function InternalController.TestProxy of the f... |
| CVE-2026-116275 | MEDIUM | 6.3 | — | Oct 26, 2026 | A vulnerability was found in AllenAI AllenNLP up to 2.10.1. This impacts the function Registrable.resolve_class_name of ... |
| CVE-2026-116274 | MEDIUM | 4.3 | 0.2% | Oct 26, 2026 | A vulnerability has been found in JIZHICMS up to 2.5.6. This affects the function Pay of the file app/home/c/OrderContro... |
| CVE-2026-116219 | HIGH | 7.2 | 2.1% | Oct 26, 2026 | Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in htdocs/admin/tools/export.php that lets... |
| CVE-2026-116218 | HIGH | 7.6 | 0.3% | Oct 26, 2026 | Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL injection vulnerability that allows authenticated API users to inj... |
| CVE-2026-116217 | MEDIUM | 6.1 | — | Oct 26, 2026 | RosarioSIS before 12.9.2 contains a reflected cross-site scripting vulnerability in modules/Food_Service/MenuReports.php... |
| CVE-2026-116216 | MEDIUM | 5.3 | 0.3% | Oct 26, 2026 | MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData() that allows unau... |
| CVE-2026-116215 | LOW | 3.1 | 0.2% | Oct 26, 2026 | MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated m... |