CVE Vulnerability Database
Search and browse 420,595 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-76303 | MEDIUM | 4.8 | 0.2% | Oct 21, 2026 | In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store attacker-cont... |
| CVE-2026-76302 | CRITICAL | 9.9 | 0.2% | Oct 21, 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int... |
| CVE-2026-76301 | CRITICAL | 9.8 | 0.2% | Oct 21, 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int... |
| CVE-2026-76300 | HIGH | 8.8 | 0.2% | Oct 21, 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int... |
| CVE-2026-76299 | CRITICAL | 9.9 | 0.1% | Oct 21, 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int... |
| CVE-2026-76298 | HIGH | 8.8 | 0.4% | Oct 21, 2026 | In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "power" Splunk roles coul... |
| CVE-2026-76297 | MEDIUM | 5.4 | 0.1% | Oct 21, 2026 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that... |
| CVE-2026-76296 | MEDIUM | 4.3 | 0.2% | Oct 21, 2026 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power"... |
| CVE-2026-76295 | MEDIUM | 4.3 | 0.3% | Oct 21, 2026 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.1... |
| CVE-2026-76294 | MEDIUM | 4.3 | 0.3% | Oct 21, 2026 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power"... |
| CVE-2026-76293 | HIGH | 7.2 | 0.5% | Oct 21, 2026 | In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edit_manager_... |
| CVE-2026-76292 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.1... |
| CVE-2026-76291 | HIGH | 8.8 | 0.4% | Oct 21, 2026 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the schedule_sear... |
| CVE-2026-76290 | HIGH | 7.5 | 0.5% | Oct 21, 2026 | In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to... |
| CVE-2026-76289 | MEDIUM | 6.5 | 0.4% | Oct 21, 2026 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power"... |
| CVE-2026-76288 | HIGH | 7.5 | 0.5% | Oct 21, 2026 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a single cra... |
| CVE-2026-76287 | MEDIUM | 5.4 | 0.2% | Oct 21, 2026 | In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline capabilit... |
| CVE-2026-114441 | HIGH | 7.3 | 0.3% | Oct 21, 2026 | A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the ... |
| CVE-2026-114440 | HIGH | 7.3 | 0.3% | Oct 21, 2026 | A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/del... |
| CVE-2026-114439 | HIGH | 7.3 | 0.5% | Oct 21, 2026 | A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionali... |
| CVE-2026-106053 | — | — | — | Oct 21, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-103090 | HIGH | 8.8 | 0.3% | Oct 21, 2026 | Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control... |
| CVE-2026-100420 | MEDIUM | 6.8 | 0.2% | Oct 21, 2026 | A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers ... |
| CVE-2026-94423 | CRITICAL | 9.1 | 0.3% | Oct 21, 2026 | Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host ke... |
| CVE-2026-94140 | CRITICAL | 9.1 | 0.3% | Oct 21, 2026 | Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes St... |