CVE Vulnerability Database
Search and browse 420,569 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-116140 | LOW | 3.3 | 0.1% | Oct 25, 2026 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executa... |
| CVE-2026-116139 | MEDIUM | 5.4 | 0.2% | Oct 25, 2026 | WWBN AVideo 26.0 through 29.3.0 contains a stored cross-site scripting vulnerability that allows authenticated commenter... |
| CVE-2026-116053 | MEDIUM | 5.3 | 0.7% | Oct 25, 2026 | A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The impacted element is the function source_special_c... |
| CVE-2026-116052 | MEDIUM | 4.3 | 0.2% | Oct 25, 2026 | A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function. ... |
| CVE-2026-116137 | LOW | 3.7 | 0.3% | Oct 25, 2026 | adm-zip through 0.6.1 contains a duplicate-entry validation bypass that allows attackers to evade the readEntries() chec... |
| CVE-2026-116136 | MEDIUM | 5.9 | 0.2% | Oct 25, 2026 | ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::link() that allows s... |
| CVE-2026-116073 | MEDIUM | 6.5 | 0.3% | Oct 25, 2026 | Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that allows attackers to... |
| CVE-2026-116072 | MEDIUM | 5.4 | 0.1% | Oct 25, 2026 | Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log... |
| CVE-2026-116071 | MEDIUM | 5.9 | 0.2% | Oct 25, 2026 | rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because th... |
| CVE-2026-116070 | MEDIUM | 6.5 | 0.5% | Oct 25, 2026 | Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows ... |
| CVE-2026-116069 | MEDIUM | 6.5 | 0.3% | Oct 25, 2026 | NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers... |
| CVE-2026-116068 | HIGH | 8.8 | 0.3% | Oct 25, 2026 | Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization ... |
| CVE-2026-116067 | HIGH | 8.2 | 1.7% | Oct 25, 2026 | Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBacku... |
| CVE-2026-116066 | MEDIUM | 6.8 | 0.3% | Oct 25, 2026 | Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that... |
| CVE-2026-116050 | HIGH | 7.3 | 0.3% | Oct 25, 2026 | A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e36d70d9ae356adec9fe.... |
| CVE-2026-116049 | HIGH | 7.3 | 0.3% | Oct 25, 2026 | A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected b... |
| CVE-2026-116048 | HIGH | 7.3 | 0.3% | Oct 25, 2026 | A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Aff... |
| CVE-2026-116047 | MEDIUM | 4.3 | 0.3% | Oct 25, 2026 | A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file... |
| CVE-2026-116046 | MEDIUM | 5.3 | 0.1% | Oct 25, 2026 | A flaw has been found in eventcatalog sdk up to 2.29.0. This vulnerability affects the function getCustomDoc/writeCustom... |
| CVE-2026-116045 | MEDIUM | 4.3 | 0.3% | Oct 25, 2026 | A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_reference of the file ... |
| CVE-2026-94295 | MEDIUM | 5.3 | 0.1% | Oct 25, 2026 | The Chikkili- Google Pay India for Woocommerce WordPress plugin through 1.0.6 does not verify that a payment notificatio... |
| CVE-2026-116044 | MEDIUM | 6.3 | 0.2% | Oct 25, 2026 | A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unkn... |
| CVE-2026-115251 | HIGH | 7.2 | 0.2% | Oct 25, 2026 | The Duplicator WordPress plugin before 5.0.0 does not restrict its one-click upgrade routine to users allowed to instal... |
| CVE-2026-115214 | CRITICAL | 9.8 | 0.1% | Oct 25, 2026 | The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP reque... |
| CVE-2026-115183 | LOW | 2.4 | 0.1% | Oct 25, 2026 | The Qi Addons For Elementor WordPress plugin before 1.11.2 does not properly sanitise a widget's heading text after deco... |