CVE Vulnerability Database
Search and browse 420,576 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-115931 | CRITICAL | 9.9 | 0.5% | Oct 23, 2026 | Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not r... |
| CVE-2026-110814 | — | — | — | Oct 23, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-108793 | — | — | — | Oct 23, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-108537 | — | — | — | Oct 23, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-115938 | HIGH | 8.8 | 0.4% | Oct 23, 2026 | Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is ev... |
| CVE-2026-115937 | HIGH | 7.5 | 0.2% | Oct 23, 2026 | The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong ... |
| CVE-2026-115935 | HIGH | 8.8 | 0.4% | Oct 23, 2026 | The app/process-api-response-headers action accepts fake Craft API response headers from any authenticated control panel... |
| CVE-2026-115897 | LOW | 2.1 | 0.3% | Oct 23, 2026 | Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions.... |
| CVE-2026-115895 | HIGH | 8.8 | 0.5% | Oct 23, 2026 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. From 17.0.0 until 21.0.4... |
| CVE-2026-115893 | CRITICAL | 9.9 | 1.0% | Oct 23, 2026 | Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 c... |
| CVE-2026-115892 | MEDIUM | 5.7 | 0.4% | Oct 23, 2026 | Wasmtime is a runtime for WebAssembly. From 46.0.0 until 48.0.7 and 49.0.4, lowering a host-created component-model stre... |
| CVE-2026-115889 | CRITICAL | 9.9 | 0.5% | Oct 23, 2026 | Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value i... |
| CVE-2026-115887 | HIGH | 7.5 | 0.5% | Oct 23, 2026 | GraphQL Scalars is a library of custom GraphQL scalars for creating precise type-safe GraphQL schemas. From 1.24.1 until... |
| CVE-2026-115886 | MEDIUM | 6.5 | 0.7% | Oct 23, 2026 | MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.... |
| CVE-2026-115885 | MEDIUM | 4.1 | 0.1% | Oct 23, 2026 | The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --ver... |
| CVE-2026-115883 | MEDIUM | 6 | 0.3% | Oct 23, 2026 | LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Pr... |
| CVE-2026-115801 | MEDIUM | 5.3 | 0.1% | Oct 23, 2026 | A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::... |
| CVE-2026-83813 | LOW | 3.1 | 0.1% | Oct 23, 2026 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.name... |
| CVE-2026-75525 | MEDIUM | 5.3 | 0.1% | Oct 23, 2026 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions ... |
| CVE-2026-75524 | MEDIUM | 5.4 | 0.2% | Oct 23, 2026 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver... |
| CVE-2026-65825 | HIGH | 7.5 | 0.2% | Oct 23, 2026 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions ... |
| CVE-2026-65824 | HIGH | 7.4 | 0.3% | Oct 23, 2026 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver... |
| CVE-2026-58202 | HIGH | 8.3 | 0.2% | Oct 23, 2026 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver... |
| CVE-2026-57849 | — | — | — | Oct 23, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-115877 | MEDIUM | 5.4 | 0.3% | Oct 23, 2026 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.web.... |