CVE Vulnerability Database
Search and browse 420,607 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-114258 | HIGH | 7.3 | 0.3% | Oct 21, 2026 | A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Aff... |
| CVE-2026-114123 | HIGH | 7.5 | 0.4% | Oct 21, 2026 | D365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365 Finance & Operations X++ code and metad... |
| CVE-2026-114122 | LOW | 3.9 | 0.2% | Oct 21, 2026 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version... |
| CVE-2026-114121 | MEDIUM | 5.4 | 0.2% | Oct 21, 2026 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version... |
| CVE-2026-113800 | MEDIUM | 5.4 | 0.2% | Oct 21, 2026 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version... |
| CVE-2026-113799 | MEDIUM | 5.3 | 0.4% | Oct 21, 2026 | Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Versions 1.0.0 through 2.27.0 exp... |
| CVE-2026-113798 | MEDIUM | 5.4 | 0.2% | Oct 21, 2026 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version... |
| CVE-2026-113797 | LOW | 3.1 | 0.6% | Oct 21, 2026 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version... |
| CVE-2026-113796 | MEDIUM | 4.2 | 0.2% | Oct 21, 2026 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version... |
| CVE-2026-114490 | HIGH | 7.8 | 0.1% | Oct 21, 2026 | Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an acc... |
| CVE-2026-114489 | HIGH | 8.1 | 0.3% | Oct 21, 2026 | Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow... |
| CVE-2026-114479 | MEDIUM | 5.8 | 0.3% | Oct 21, 2026 | Not failing securely in the anti-virus attachment-stripping action of Progressive Robot hMailServer 6.0.0 through 6.3.6 ... |
| CVE-2026-114478 | MEDIUM | 5.9 | 0.3% | Oct 21, 2026 | Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 ... |
| CVE-2026-114477 | MEDIUM | 4.3 | 0.2% | Oct 21, 2026 | Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a remote au... |
| CVE-2026-114476 | HIGH | 7.5 | 0.3% | Oct 21, 2026 | Incorrect authorization in the REST administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a rem... |
| CVE-2026-114475 | MEDIUM | 6.5 | 0.2% | Oct 21, 2026 | Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a r... |
| CVE-2026-114474 | MEDIUM | 5.9 | 0.2% | Oct 21, 2026 | Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6... |
| CVE-2026-114473 | MEDIUM | 5 | 0.2% | Oct 21, 2026 | Incorrect authorization in the Sender Rewriting Scheme (SRS) of Progressive Robot hMailServer 6.2.1 through 6.3.6 allows... |
| CVE-2026-114472 | LOW | 3.7 | 0.2% | Oct 21, 2026 | Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 ... |
| CVE-2026-114471 | MEDIUM | 4.7 | 0.1% | Oct 21, 2026 | Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServer 6.0.0 through 6.3... |
| CVE-2026-114470 | MEDIUM | 5.3 | 0.2% | Oct 21, 2026 | Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker... |
| CVE-2026-114463 | HIGH | 7.5 | 0.4% | Oct 21, 2026 | The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{route_name}:{... |
| CVE-2026-114462 | MEDIUM | 6 | 0.3% | Oct 21, 2026 | Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServ... |
| CVE-2026-114370 | LOW | 3.7 | 0.3% | Oct 21, 2026 | A flaw was found in the PathResourceManager component of the Undertow web server. This component is responsible for serv... |
| CVE-2026-114257 | HIGH | 7.3 | 0.3% | Oct 21, 2026 | A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e95... |