CVE Vulnerability Database
Search and browse 420,542 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-116057 | MEDIUM | 6.3 | 0.3% | Oct 25, 2026 | A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown function... |
| CVE-2026-116056 | MEDIUM | 6.3 | 0.4% | Oct 25, 2026 | A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function request_url_safe of the file app/func... |
| CVE-2026-116055 | MEDIUM | 6.3 | 0.3% | Oct 25, 2026 | A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impacts an unknown function of the... |
| CVE-2026-116054 | LOW | 2.2 | 0.2% | Oct 25, 2026 | A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Mó... |
| CVE-2026-116211 | HIGH | 8.2 | 0.3% | Oct 25, 2026 | YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche fiel... |
| CVE-2026-116208 | HIGH | 8.1 | 0.2% | Oct 25, 2026 | YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubService::syncActorPosts tha... |
| CVE-2026-116207 | CRITICAL | 9.1 | 0.3% | Oct 25, 2026 | YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability ... |
| CVE-2026-116206 | MEDIUM | 6.4 | 0.2% | Oct 25, 2026 | YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site scripting vulnerability that allows authenticated users to ... |
| CVE-2026-116205 | MEDIUM | 5.3 | 0.5% | Oct 25, 2026 | YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers ... |
| CVE-2026-116204 | HIGH | 8.1 | 0.1% | Oct 25, 2026 | YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action (tools/security/actions/de... |
| CVE-2026-116203 | MEDIUM | 6.1 | 0.2% | Oct 25, 2026 | YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags action, which echoes attacke... |
| CVE-2026-116202 | MEDIUM | 5.4 | 0.1% | Oct 25, 2026 | YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low-privilege authenticated users ... |
| CVE-2026-116201 | HIGH | 8.8 | 0.3% | Oct 25, 2026 | Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions ... |
| CVE-2026-116200 | MEDIUM | 5.9 | 0.2% | Oct 25, 2026 | Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing on-path attackers to ... |
| CVE-2026-116199 | HIGH | 8.1 | 0.3% | Oct 25, 2026 | Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallback, which logs in the... |
| CVE-2026-116198 | MEDIUM | 4.3 | 0.1% | Oct 25, 2026 | Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext i... |
| CVE-2026-116197 | LOW | 2.6 | 0.2% | Oct 25, 2026 | Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection flaw in imagepuller ... |
| CVE-2026-116196 | MEDIUM | 5.3 | 0.1% | Oct 25, 2026 | Rclone before v1.75.2 contains a credential exposure vulnerability in the b2 backend that leaks the live account Authori... |
| CVE-2026-116195 | MEDIUM | 6.1 | 0.2% | Oct 25, 2026 | Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink function, which trims ... |
| CVE-2026-116194 | MEDIUM | 6.8 | 0.1% | Oct 25, 2026 | Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in the pCloud backend's localhost O... |
| CVE-2026-116193 | MEDIUM | 5.3 | 0.2% | Oct 25, 2026 | Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav that lets unauthenticat... |
| CVE-2026-116192 | MEDIUM | 5.9 | 0.2% | Oct 25, 2026 | rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attacker... |
| CVE-2026-116191 | HIGH | 7.5 | 0.4% | Oct 25, 2026 | Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to wr... |
| CVE-2026-116190 | LOW | 3.7 | 0.2% | Oct 25, 2026 | rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV backend that forwards ... |
| CVE-2026-116189 | HIGH | 7.5 | 0.1% | Oct 25, 2026 | rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums fro... |