CVE Vulnerability Database
Search and browse 420,577 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-112838 | HIGH | 7.1 | 0.1% | Oct 23, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCa... |
| CVE-2026-112837 | HIGH | 8.5 | 0.2% | Oct 23, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiP... |
| CVE-2026-112835 | HIGH | 7.1 | 0.1% | Oct 23, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCa... |
| CVE-2026-112825 | MEDIUM | 6.5 | 0.2% | Oct 23, 2026 | Missing Authorization vulnerability in Magepeople inc. Car Rental Manager car-rental-manager allows Exploiting Incorrect... |
| CVE-2026-112821 | MEDIUM | 6.5 | 0.2% | Oct 23, 2026 | Missing Authorization vulnerability in Knit Pay Knit Pay knit-pay allows Exploiting Incorrectly Configured Access Contro... |
| CVE-2026-112359 | HIGH | 7.5 | 0.2% | Oct 23, 2026 | Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Exploiting Incorrectly Configured Access... |
| CVE-2025-58403 | MEDIUM | 5.1 | 0.5% | Oct 23, 2026 | CGM CLININET is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of user-supplied data.... |
| CVE-2025-30054 | CRITICAL | 9.3 | 0.1% | Oct 23, 2026 | CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with roo... |
| CVE-2025-30053 | MEDIUM | 6.9 | 0.4% | Oct 23, 2026 | The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication. ... |
| CVE-2025-30052 | HIGH | 8.8 | 0.3% | Oct 23, 2026 | The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based s... |
| CVE-2025-30051 | MEDIUM | 6.8 | 0.1% | Oct 23, 2026 | The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, ... |
| CVE-2025-30050 | CRITICAL | 9.4 | 0.2% | Oct 23, 2026 | CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified ... |
| CVE-2025-30049 | HIGH | 8.2 | 0.2% | Oct 23, 2026 | The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 a... |
| CVE-2025-30047 | CRITICAL | 9.4 | 0.4% | Oct 23, 2026 | CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an H... |
| CVE-2025-30046 | CRITICAL | 9 | 0.3% | Oct 23, 2026 | In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run w... |
| CVE-2025-30045 | HIGH | 8.6 | 0.2% | Oct 23, 2026 | CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF documen... |
| CVE-2025-30043 | HIGH | 7.1 | 0.2% | Oct 23, 2026 | CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is ac... |
| CVE-2026-93489 | HIGH | 8.7 | 0.2% | Oct 23, 2026 | Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge a... |
| CVE-2026-75779 | HIGH | 8.6 | 1.2% | Oct 23, 2026 | Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forger... |
| CVE-2026-75775 | HIGH | 7.7 | 0.6% | Oct 23, 2026 | Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute ... |
| CVE-2026-63244 | CRITICAL | 9.8 | 0.7% | Oct 23, 2026 | An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthe... |
| CVE-2026-4952 | MEDIUM | 5.1 | 0.3% | Oct 23, 2026 | The "ASMobile" web interface, which is part of the VertiGIS software package "GIS Portal", allows authenticated users to... |
| CVE-2026-4951 | MEDIUM | 5.1 | 0.4% | Oct 23, 2026 | The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to search for emplo... |
| CVE-2026-4950 | MEDIUM | 4.8 | 0.3% | Oct 23, 2026 | The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the emplo... |
| CVE-2026-63243 | MEDIUM | 4.3 | 0.2% | Oct 23, 2026 | An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana could ... |