CVE Vulnerability Database
Search and browse 420,590 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-114220 | CRITICAL | 9.1 | 0.2% | Oct 22, 2026 | NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-a... |
| CVE-2026-114219 | HIGH | 7.4 | 0.3% | Oct 22, 2026 | NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated remote attackers ca... |
| CVE-2026-114732 | HIGH | 8.1 | 0.4% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability in multi-... |
| CVE-2026-114731 | MEDIUM | 5.3 | 0.4% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vulnerability... |
| CVE-2026-114730 | HIGH | 7.2 | 0.4% | Oct 22, 2026 | Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass... |
| CVE-2026-114729 | MEDIUM | 5.3 | 0.4% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass. rcube_washtml in... |
| CVE-2026-110354 | HIGH | 7.5 | 0.8% | Oct 22, 2026 | HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread C... |
| CVE-2026-110353 | HIGH | 7.5 | 0.7% | Oct 22, 2026 | HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaus... |
| CVE-2026-96398 | MEDIUM | 4.3 | 0.2% | Oct 22, 2026 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f... |
| CVE-2026-96392 | LOW | 3.5 | 0.2% | Oct 22, 2026 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code In... |
| CVE-2026-96391 | MEDIUM | 4.3 | 0.2% | Oct 22, 2026 | Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST ver... |
| CVE-2026-96390 | MEDIUM | 4.3 | 0.1% | Oct 22, 2026 | Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker allows Privilege Escalat... |
| CVE-2026-96388 | MEDIUM | 5.4 | 0.1% | Oct 22, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Tawk.to - Live chat application allows Cross Site Request Forg... |
| CVE-2026-96387 | LOW | 3.8 | 0.2% | Oct 22, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop administrator login allows Authent... |
| CVE-2026-96386 | MEDIUM | 6.5 | 0.2% | Oct 22, 2026 | Missing Authorization vulnerability in Drupal Smart Content allows Forceful Browsing. This issue affects Smart Content v... |
| CVE-2026-96385 | MEDIUM | 6.5 | 0.2% | Oct 22, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API Authentication for Drup... |
| CVE-2026-96384 | LOW | 3.5 | 0.2% | Oct 22, 2026 | Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Merma... |
| CVE-2026-96382 | MEDIUM | 4.6 | 0.1% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Diba carous... |
| CVE-2026-96380 | MEDIUM | 6.5 | 0.1% | Oct 22, 2026 | Missing Authorization vulnerability in Drupal CSS Usage Analyzer allows Forceful Browsing. This issue affects CSS Usage ... |
| CVE-2026-96379 | LOW | 3.5 | 0.1% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CookieCuttr... |
| CVE-2026-96378 | MEDIUM | 4.3 | 0.4% | Oct 22, 2026 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Commerce Decouple... |
| CVE-2026-96377 | MEDIUM | 5.3 | 0.1% | Oct 22, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Alloc... |
| CVE-2026-96376 | MEDIUM | 6.4 | 0.6% | Oct 22, 2026 | Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud... |
| CVE-2026-96375 | MEDIUM | 4.8 | 0.1% | Oct 22, 2026 | Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects ... |
| CVE-2026-96374 | MEDIUM | 4.2 | 0.1% | Oct 22, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue ... |