CVE Vulnerability Database
Search and browse 420,576 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-116014 | HIGH | 8.1 | 0.4% | Oct 24, 2026 | open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bi... |
| CVE-2026-116013 | LOW | 3.7 | 0.3% | Oct 24, 2026 | OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_section() and _decode_n... |
| CVE-2026-116012 | LOW | 3.6 | 0.2% | Oct 24, 2026 | Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining... |
| CVE-2026-116011 | HIGH | 7.5 | 0.7% | Oct 24, 2026 | Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load() that allows remote unauthentica... |
| CVE-2026-116010 | MEDIUM | 4.3 | 0.2% | Oct 24, 2026 | RosarioSIS before 12.9.1 contains a missing authorization vulnerability that allows authenticated teachers to write reco... |
| CVE-2026-116009 | HIGH | 8.8 | 0.4% | Oct 24, 2026 | Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the media permission to wr... |
| CVE-2026-116008 | MEDIUM | 4.3 | 0.2% | Oct 24, 2026 | DaybydayCRM through 2.2.1 contains a missing authorization vulnerability in ProjectsController::updateAssign() that allo... |
| CVE-2026-110018 | HIGH | 8.8 | 0.4% | Oct 24, 2026 | The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordP... |
| CVE-2026-115998 | MEDIUM | 4.3 | 0.2% | Oct 24, 2026 | IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept... |
| CVE-2026-115994 | MEDIUM | 5.4 | 0.2% | Oct 24, 2026 | BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker modify or delete targ... |
| CVE-2026-114705 | MEDIUM | 6.5 | 0.2% | Oct 24, 2026 | Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows Exploiting Incorrectly Con... |
| CVE-2026-114194 | MEDIUM | 6.5 | 0.2% | Oct 24, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inser... |
| CVE-2026-115993 | MEDIUM | 6.8 | 0.3% | Oct 24, 2026 | Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker t... |
| CVE-2026-94075 | CRITICAL | 9.8 | 0.4% | Oct 24, 2026 | Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injecti... |
| CVE-2026-115975 | HIGH | 7.1 | 0.2% | Oct 24, 2026 | Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delet... |
| CVE-2026-114697 | HIGH | 7.1 | 0.2% | Oct 24, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuarkA QA Analytic... |
| CVE-2026-114695 | HIGH | 7.1 | 0.2% | Oct 24, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infomaniak Network... |
| CVE-2026-114694 | HIGH | 7.1 | 0.3% | Oct 24, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Ma... |
| CVE-2026-114693 | MEDIUM | 6.5 | 0.2% | Oct 24, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugins360 Labs Al... |
| CVE-2026-114196 | CRITICAL | 9.8 | 0.4% | Oct 24, 2026 | Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows Object Injection.This issue aff... |
| CVE-2026-114190 | MEDIUM | 5.9 | 0.3% | Oct 24, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in Hai Zheng / Lite Speed Cache LiteSpeed Cache litespee... |
| CVE-2026-114179 | HIGH | 7.1 | 0.2% | Oct 24, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordplus BP Better... |
| CVE-2026-114178 | HIGH | 7.1 | 0.2% | Oct 24, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bold Grid W3 Total... |
| CVE-2026-112869 | HIGH | 7.1 | 0.2% | Oct 24, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Hearle We’re ... |
| CVE-2026-112866 | CRITICAL | 9.3 | 0.4% | Oct 24, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Product ... |