CVE Vulnerability Database
Search and browse 420,577 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-86018 | MEDIUM | 5.3 | 0.3% | Oct 23, 2026 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows... |
| CVE-2026-59188 | MEDIUM | 5.4 | 0.1% | Oct 23, 2026 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.3, Part-DB-server... |
| CVE-2026-55835 | MEDIUM | 6.9 | 0.3% | Oct 23, 2026 | Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call eac... |
| CVE-2026-115497 | HIGH | 7.5 | — | Oct 23, 2026 | The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, a... |
| CVE-2026-109198 | HIGH | 7.2 | — | Oct 23, 2026 | The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scr... |
| CVE-2026-90458 | MEDIUM | 5.4 | 0.3% | Oct 23, 2026 | OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfis... |
| CVE-2026-89419 | MEDIUM | 5 | 0.3% | Oct 23, 2026 | OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/node... |
| CVE-2026-55600 | MEDIUM | 5.7 | 0.3% | Oct 23, 2026 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.2, Part-DB render... |
| CVE-2026-54631 | MEDIUM | 6.3 | 0.1% | Oct 23, 2026 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the file .env ... |
| CVE-2026-54630 | CRITICAL | 9.6 | 0.2% | Oct 23, 2026 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part attac... |
| CVE-2026-54615 | MEDIUM | 6 | 0.3% | Oct 23, 2026 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, LogEntryExtraF... |
| CVE-2026-115638 | MEDIUM | 4.3 | 0.2% | Oct 23, 2026 | OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of unco... |
| CVE-2026-115547 | CRITICAL | 9.1 | 0.4% | Oct 23, 2026 | An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of specially formatted co... |
| CVE-2026-115546 | HIGH | 8.1 | 0.4% | Oct 23, 2026 | Okta Access Gateway (OAG) does not validate the selected authentication source during sign-on. An authenticated user wit... |
| CVE-2026-19678 | HIGH | 8.7 | 0.4% | Oct 23, 2026 | A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase For... |
| CVE-2026-19677 | CRITICAL | 9.3 | 0.5% | Oct 23, 2026 | An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthe... |
| CVE-2026-115537 | MEDIUM | 4.3 | 0.3% | Oct 23, 2026 | A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This af... |
| CVE-2026-115536 | MEDIUM | 4.3 | 0.3% | Oct 23, 2026 | A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Th... |
| CVE-2026-115535 | LOW | 2.4 | 0.2% | Oct 23, 2026 | A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The aff... |
| CVE-2026-115486 | HIGH | 7.1 | 0.2% | Oct 23, 2026 | A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer addres... |
| CVE-2026-115485 | MEDIUM | 6.3 | 0.2% | Oct 23, 2026 | A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data wi... |
| CVE-2026-115484 | HIGH | 7.6 | 0.2% | Oct 23, 2026 | A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of ... |
| CVE-2026-115534 | MEDIUM | 4.3 | 0.3% | Oct 23, 2026 | A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacte... |
| CVE-2026-92450 | HIGH | 7.5 | 0.4% | Oct 22, 2026 | The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HM... |
| CVE-2026-110825 | HIGH | 7.5 | 0.3% | Oct 22, 2026 | The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write... |