CVE Vulnerability Database
Search and browse 420,569 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-116190 | LOW | 3.7 | 0.2% | Oct 25, 2026 | rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV backend that forwards ... |
| CVE-2026-116189 | HIGH | 7.5 | 0.1% | Oct 25, 2026 | rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums fro... |
| CVE-2026-116188 | MEDIUM | 5.3 | 0.3% | Oct 25, 2026 | rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in multipart reorder-memory acco... |
| CVE-2026-116187 | MEDIUM | 5 | 0.2% | Oct 25, 2026 | Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 --auth-proxy that allows a... |
| CVE-2026-116186 | LOW | 2.3 | 0.2% | Oct 25, 2026 | OpenRemote core (openremote-manager) before 1.31.0 does not perform realm or gateway-descendant authorization on inbound... |
| CVE-2026-116185 | MEDIUM | 5 | 0.2% | Oct 25, 2026 | OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows authenticated users to read oth... |
| CVE-2026-116184 | LOW | 2.1 | 0.2% | Oct 25, 2026 | OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm admins to impersonate gateways... |
| CVE-2026-116183 | HIGH | 7.5 | 0.2% | Oct 25, 2026 | phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows unauthenticated attackers... |
| CVE-2026-116182 | MEDIUM | 5 | 0.2% | Oct 25, 2026 | phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export feature that fetches exter... |
| CVE-2026-116181 | MEDIUM | 6.5 | 0.4% | Oct 25, 2026 | vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash... |
| CVE-2026-116180 | HIGH | 7.7 | 0.2% | Oct 25, 2026 | vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/outputs.py allocates ... |
| CVE-2026-116179 | HIGH | 7.5 | 0.3% | Oct 25, 2026 | vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/... |
| CVE-2026-116178 | HIGH | 7.5 | 0.3% | Oct 25, 2026 | vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engi... |
| CVE-2026-116177 | HIGH | 7.5 | 0.3% | Oct 25, 2026 | vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated a... |
| CVE-2026-116176 | HIGH | 8.2 | 0.3% | Oct 25, 2026 | vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outb... |
| CVE-2026-116175 | MEDIUM | 6.5 | 0.3% | Oct 25, 2026 | vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the AudioMediaIO multimodal path call... |
| CVE-2026-116174 | HIGH | 7.5 | 0.3% | Oct 25, 2026 | vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC Generate and Generat... |
| CVE-2026-116173 | HIGH | 7.5 | 0.3% | Oct 25, 2026 | vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attackers to terminate Engi... |
| CVE-2026-116172 | HIGH | 7.5 | 0.3% | Oct 25, 2026 | vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC converter that allow... |
| CVE-2026-116171 | MEDIUM | 4.4 | 0.6% | Oct 25, 2026 | SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath because the Windows ex... |
| CVE-2026-116170 | MEDIUM | 4.9 | 0.4% | Oct 25, 2026 | SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injec... |
| CVE-2026-116169 | MEDIUM | 5.4 | 0.2% | Oct 25, 2026 | SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site scripting vulnerability that allows users with edit permiss... |
| CVE-2026-116168 | MEDIUM | 6.2 | 0.2% | Oct 25, 2026 | SiYuan before 3.8.7 contains a path traversal vulnerability in the MCP asset tool because validateAssetUploadPaths relie... |
| CVE-2026-116167 | MEDIUM | 6.8 | 0.3% | Oct 25, 2026 | SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the unauthenticated /check-auth page tha... |
| CVE-2026-116166 | MEDIUM | 6.8 | 0.1% | Oct 25, 2026 | SiYuan 3.6.0 before 3.8.7 accepts and persists the networkServeTLS setting but never enforces it, so the kernel port kee... |