CVE Vulnerability Database
Search and browse 420,515 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110475 | CRITICAL | 9.3 | 0.5% | Oct 26, 2026 | This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization con... |
| CVE-2026-110474 | HIGH | 8.7 | 0.4% | Oct 26, 2026 | This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the... |
| CVE-2026-110314 | MEDIUM | 6.3 | 0.4% | Oct 26, 2026 | Client-Side Enforcement of Server-Side Security vulnerability in the WebSocket connection handling of mtrudel bandit all... |
| CVE-2026-109584 | HIGH | 8.7 | — | Oct 26, 2026 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in the HTTP/2 implementation of mtrudel b... |
| CVE-2026-108529 | HIGH | 8.7 | — | Oct 26, 2026 | Inefficient Algorithmic Complexity vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticate... |
| CVE-2026-108525 | HIGH | 8.7 | — | Oct 26, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit allows... |
| CVE-2026-107656 | CRITICAL | 9.8 | — | Oct 26, 2026 | An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, ... |
| CVE-2026-107157 | LOW | 2 | — | Oct 26, 2026 | Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may cras... |
| CVE-2026-107092 | CRITICAL | 9.8 | 0.9% | Oct 26, 2026 | NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint. |
| CVE-2026-96432 | LOW | 2.1 | — | Oct 26, 2026 | A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST_STREAM on a completed stream, planting a ... |
| CVE-2026-94380 | HIGH | 8.1 | — | Oct 26, 2026 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Liman MYS allows Password Recover... |
| CVE-2026-116263 | MEDIUM | 4.6 | 0.1% | Oct 26, 2026 | A flaw has been found in HaschekSolutions PictShare up to 3.7.1. The impacted element is the function architect of the f... |
| CVE-2026-116262 | MEDIUM | 5.4 | — | Oct 26, 2026 | A vulnerability was detected in libimobiledevice up to 1.4.0. The affected element is the function webinspector_receive_... |
| CVE-2026-116261 | LOW | 3.5 | 0.2% | Oct 26, 2026 | A security vulnerability has been detected in libimobiledevice up to 1.4.0. Impacted is the function afc_file_open of th... |
| CVE-2026-116260 | HIGH | 7.3 | 0.3% | Oct 26, 2026 | A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receive of the f... |
| CVE-2026-115720 | MEDIUM | 5 | — | Oct 26, 2026 | Frappe Builder before 1.36.1 contains a server-side request forgery vulnerability in builder/api.py where the assert_not... |
| CVE-2026-115718 | MEDIUM | 4.3 | 0.3% | Oct 26, 2026 | Frappe Builder versions 1.33.0 before 1.36.0 contain a missing authorization vulnerability in the improve_prompt endpoin... |
| CVE-2026-115717 | HIGH | 7.7 | 0.3% | Oct 26, 2026 | Frappe Builder versions before 1.36.1 contain a server-side request forgery vulnerability in the convert_to_webp API end... |
| CVE-2026-105947 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software, Teleco... |
| CVE-2012-20006 | — | — | — | Oct 26, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-89209 | MEDIUM | 6.8 | 0.3% | Oct 26, 2026 | A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 1... |
| CVE-2026-116469 | HIGH | 7.1 | 0.4% | Oct 26, 2026 | MISP Guard, a proxy-based security filter for MISP feed distribution, contains a case-sensitivity flaw in multiple polic... |
| CVE-2026-116259 | MEDIUM | 5.3 | — | Oct 26, 2026 | A security flaw has been discovered in libimobiledevice up to 1.4.0. This vulnerability affects the function afc_get_dev... |
| CVE-2026-116258 | MEDIUM | 6.3 | 0.2% | Oct 26, 2026 | A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the file src/afc.c of th... |
| CVE-2026-116257 | HIGH | 7.3 | 0.6% | Oct 26, 2026 | A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is the function processInstall of t... |