CVE Vulnerability Database
Search and browse 420,590 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-115324 | HIGH | 8.1 | 0.3% | Oct 22, 2026 | mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attack... |
| CVE-2026-115323 | HIGH | 7.3 | 0.2% | Oct 22, 2026 | EverShop 1.2.2 before 2.2.1 contains a missing authorization vulnerability in the customer address API that allows unaut... |
| CVE-2026-115322 | MEDIUM | 4.3 | 0.3% | Oct 22, 2026 | Bytebase before 3.16.0 contains an authorization bypass vulnerability in GetTaskRunLog, GetTaskRunSession and PreviewTas... |
| CVE-2026-115321 | MEDIUM | 4.3 | 0.2% | Oct 22, 2026 | Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that allows low-... |
| CVE-2026-115319 | LOW | 2.5 | 0.1% | Oct 22, 2026 | fzf 0.36.0 through 0.74.5 contains an inefficient algorithmic complexity vulnerability in maskActionContents that allows... |
| CVE-2026-115207 | MEDIUM | 5.5 | 0.1% | Oct 22, 2026 | A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by... |
| CVE-2026-114665 | MEDIUM | 6.5 | 0.4% | Oct 22, 2026 | Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCompare endp... |
| CVE-2026-112842 | MEDIUM | 6.5 | — | Oct 22, 2026 | Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting ... |
| CVE-2026-112832 | CRITICAL | 9.8 | — | Oct 22, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-112822 | HIGH | 8.5 | — | Oct 22, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech Workrea... |
| CVE-2026-112820 | HIGH | 8.1 | — | Oct 22, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-112313 | HIGH | 7.1 | — | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ACF Extended ACF E... |
| CVE-2026-111079 | HIGH | 7.4 | 0.3% | Oct 22, 2026 | A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command hist... |
| CVE-2025-71434 | HIGH | 8.2 | 0.3% | Oct 22, 2026 | Weaver E-cology 8.0, 9.0, and 10.0 prior to 10.76 contains an unauthenticated SQL injection vulnerability in the /api/do... |
| CVE-2024-58396 | HIGH | 7.5 | 0.5% | Oct 22, 2026 | YouDataSum CPAS Audit Management System V4 contains a path traversal vulnerability that allows unauthenticated attackers... |
| CVE-2024-58394 | MEDIUM | 6.1 | 0.2% | Oct 22, 2026 | Retool before 3.88.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to execute scri... |
| CVE-2024-58393 | HIGH | 8.2 | 0.3% | Oct 22, 2026 | i-Netsolution Readymade Unilevel Ecommerce MLM (2024-03-15 build) contains an SQL injection vulnerability that allows un... |
| CVE-2023-54413 | MEDIUM | 6.1 | 0.2% | Oct 22, 2026 | WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that all... |
| CVE-2022-51025 | MEDIUM | 6.5 | 0.4% | Oct 22, 2026 | Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attacker... |
| CVE-2022-51024 | HIGH | 7.5 | 0.4% | Oct 22, 2026 | Kavita 0.5.2 before 0.5.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitr... |
| CVE-2022-51023 | HIGH | 8.2 | 0.3% | Oct 22, 2026 | PHPOK 4.5.000 before 5.4.081 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate... |
| CVE-2022-51022 | CRITICAL | 9.1 | 0.8% | Oct 22, 2026 | YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /ad... |
| CVE-2022-51021 | HIGH | 8.2 | 0.4% | Oct 22, 2026 | NotificationX plugin for WordPress 2.0.0 before 2.3.12 contains an unauthenticated SQL injection vulnerability that allo... |
| CVE-2021-48017 | HIGH | 7.5 | 0.4% | Oct 22, 2026 | OrbiTeam BSCW Server 5.x before 5.2.5 and 7.x before 7.4.4 contains an unauthenticated path traversal vulnerability in t... |
| CVE-2021-48016 | CRITICAL | 9.8 | 0.4% | Oct 22, 2026 | DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is wri... |