CVE Vulnerability Database
Search and browse 420,586 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-115411 | MEDIUM | 5 | 0.3% | Oct 22, 2026 | crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine where isPrivate... |
| CVE-2026-115400 | MEDIUM | 4.4 | 0.1% | Oct 22, 2026 | crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access... |
| CVE-2026-115249 | MEDIUM | 4.6 | 0.2% | Oct 22, 2026 | A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Im... |
| CVE-2026-115248 | MEDIUM | 5.4 | 0.3% | Oct 22, 2026 | A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a... |
| CVE-2026-115247 | MEDIUM | 4.3 | 0.1% | Oct 22, 2026 | A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07... |
| CVE-2026-113582 | HIGH | 7.5 | 0.5% | Oct 22, 2026 | UNSUPPORTED WHEN ASSIGNED Improper restriction of XML external entity references in Apache Abdera allows an attacker to ... |
| CVE-2026-111497 | CRITICAL | 9.8 | 82.6% | Oct 22, 2026 | A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on ... |
| CVE-2026-107079 | MEDIUM | 4.3 | 0.2% | Oct 22, 2026 | An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parame... |
| CVE-2026-115246 | LOW | 3.5 | 0.2% | Oct 22, 2026 | A weakness has been identified in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a2... |
| CVE-2026-102785 | CRITICAL | 10 | — | Oct 22, 2026 | Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s pu... |
| CVE-2026-13411 | MEDIUM | 4.3 | 0.3% | Oct 22, 2026 | Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allo... |
| CVE-2026-115334 | MEDIUM | 6.8 | 0.2% | Oct 22, 2026 | Lotus through 0.10.2 contains an authorization bypass vulnerability in ChangeUserOrganizationView.post that allows authe... |
| CVE-2026-115333 | MEDIUM | 5.9 | 0.3% | Oct 22, 2026 | Lotus through 0.10.2 contains an improper authentication vulnerability in the Go event ingestion middleware that validat... |
| CVE-2026-115332 | HIGH | 8.8 | 0.3% | Oct 22, 2026 | Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL ... |
| CVE-2026-115331 | HIGH | 8.8 | 0.3% | Oct 22, 2026 | Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL ... |
| CVE-2026-115330 | HIGH | 8.8 | 0.3% | Oct 22, 2026 | Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to execute arb... |
| CVE-2026-115329 | MEDIUM | 5.9 | 0.2% | Oct 22, 2026 | Lotus through 0.10.2 contains an insecure direct object reference vulnerability in SubscriptionViewSet.get_object() that... |
| CVE-2026-115328 | HIGH | 8.8 | 0.3% | Oct 22, 2026 | JSON-SCADA before 0.65-alpha contains an sql injection vulnerability in opcApi() in src/server_realtime_auth/index.js th... |
| CVE-2026-115327 | MEDIUM | 5.3 | 0.3% | Oct 22, 2026 | libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxml_env_netconf_rpc() in src/parser_xm... |
| CVE-2026-115326 | MEDIUM | 5.4 | 0.2% | Oct 22, 2026 | QloApps through 1.7.0 contains an insecure direct object reference vulnerability in OrderDetailController::displayAjaxSu... |
| CVE-2026-115325 | HIGH | 8.3 | 0.3% | Oct 22, 2026 | Netmaker through 1.7.0 contains an authorization bypass vulnerability in the updateExtClient handler that allows network... |
| CVE-2026-115324 | HIGH | 8.1 | 0.3% | Oct 22, 2026 | mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attack... |
| CVE-2026-115323 | HIGH | 7.3 | 0.2% | Oct 22, 2026 | EverShop 1.2.2 before 2.2.1 contains a missing authorization vulnerability in the customer address API that allows unaut... |
| CVE-2026-115322 | MEDIUM | 4.3 | 0.3% | Oct 22, 2026 | Bytebase before 3.16.0 contains an authorization bypass vulnerability in GetTaskRunLog, GetTaskRunSession and PreviewTas... |
| CVE-2026-115321 | MEDIUM | 4.3 | 0.2% | Oct 22, 2026 | Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that allows low-... |