CVE Vulnerability Database
Search and browse 420,576 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-115729 | MEDIUM | 6.8 | 0.3% | Oct 23, 2026 | @pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vulnerability that allows attackers to byp... |
| CVE-2026-115728 | HIGH | 7.5 | 0.5% | Oct 23, 2026 | @hapi/content from 6.0.1 before 6.0.3 contains a regular expression denial of service vulnerability in Content.dispositi... |
| CVE-2026-112863 | HIGH | 7.1 | 0.3% | Oct 23, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hogash KALLYAS kal... |
| CVE-2026-112859 | CRITICAL | 9.8 | 0.6% | Oct 23, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Little Birdies little-birdies allows Object Injection.... |
| CVE-2026-112858 | CRITICAL | 9.8 | 0.6% | Oct 23, 2026 | Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object Injection.This issue affects ... |
| CVE-2026-112857 | CRITICAL | 9.8 | — | Oct 23, 2026 | Deserialization of Untrusted Data vulnerability in axiomthemes Reprizo reprizo allows Object Injection.This issue affect... |
| CVE-2026-112856 | CRITICAL | 9.8 | 0.6% | Oct 23, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.This issue... |
| CVE-2026-112855 | CRITICAL | 9.8 | 0.6% | Oct 23, 2026 | Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects Redy... |
| CVE-2026-112854 | CRITICAL | 9.8 | 0.6% | Oct 23, 2026 | Deserialization of Untrusted Data vulnerability in axiomthemes Holistic Center holistic-center allows Object Injection.T... |
| CVE-2026-112853 | CRITICAL | 9.8 | — | Oct 23, 2026 | Deserialization of Untrusted Data vulnerability in axiomthemes Hallelujah hallelujah allows Object Injection.This issue ... |
| CVE-2026-112852 | HIGH | 8.1 | 0.4% | Oct 23, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Helion helion allows Object Injection.This issue affec... |
| CVE-2026-112851 | CRITICAL | 9.8 | 0.6% | Oct 23, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue aff... |
| CVE-2026-112850 | HIGH | 8.1 | 0.6% | Oct 23, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-112849 | HIGH | 7.1 | — | Oct 23, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AivahThemes Hostme... |
| CVE-2026-112848 | CRITICAL | 9.8 | 0.6% | Oct 23, 2026 | Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue aff... |
| CVE-2026-112847 | CRITICAL | 9.8 | 0.6% | Oct 23, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX ZenSoul zensoul allows Object Injection.This issue affects Z... |
| CVE-2026-112846 | CRITICAL | 9.8 | 0.6% | Oct 23, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This issue... |
| CVE-2026-98916 | — | — | 0.2% | Oct 23, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: check link is beaconing for color ch... |
| CVE-2026-98915 | — | — | 0.2% | Oct 23, 2026 | In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: use vb2_video_unregister_device o... |
| CVE-2026-98914 | — | — | 0.2% | Oct 23, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth C... |
| CVE-2026-98913 | — | — | 0.2% | Oct 23, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvf_pro... |
| CVE-2026-98912 | — | — | 0.2% | Oct 23, 2026 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the ne... |
| CVE-2026-98911 | HIGH | 7.5 | 0.3% | Oct 23, 2026 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in dpaa2_switch_rx... |
| CVE-2026-98910 | — | — | 0.2% | Oct 23, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on copy_to_use... |
| CVE-2026-98909 | — | — | 0.2% | Oct 23, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: unregister devlink on port registrat... |