CVE Vulnerability Database
Search and browse 420,610 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-82942 | HIGH | 7.5 | 0.1% | Oct 21, 2026 | A data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a remote client to crash the server process ... |
| CVE-2026-82425 | HIGH | 7.5 | 0.1% | Oct 21, 2026 | A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows a malicious remote peer to crash the pro... |
| CVE-2026-82231 | HIGH | 7.5 | 0.1% | Oct 21, 2026 | A Thrift client in Apache bRPC (version < 1.18.0, built with WITH_THRIFT which is off by default) can be crashed by the ... |
| CVE-2026-82230 | HIGH | 7.5 | 0.5% | Oct 21, 2026 | Uncontrolled recursion in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows remote attac... |
| CVE-2026-82210 | HIGH | 7.5 | 0.2% | Oct 21, 2026 | Enforceable assertion in the streaming feature of Apache bRPC (version < 1.18.0) on all platforms allows a remote attack... |
| CVE-2026-19630 | HIGH | 7.5 | 0.4% | Oct 21, 2026 | In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with... |
| CVE-2026-114407 | MEDIUM | 6.1 | 0.3% | Oct 21, 2026 | e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to ... |
| CVE-2026-114405 | HIGH | 8.7 | 0.3% | Oct 21, 2026 | Improper validation of array index vulnerability in Velneo vServer. This issue affects vServer: from 36.0 before 36.6 an... |
| CVE-2026-114404 | MEDIUM | 6.1 | 0.3% | Oct 21, 2026 | PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting vulnerability in the HTML writer that allows attackers w... |
| CVE-2026-114403 | HIGH | 8.1 | 0.5% | Oct 21, 2026 | PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to inst... |
| CVE-2026-114402 | MEDIUM | 4.3 | 0.4% | Oct 21, 2026 | Trudesk through 1.2.11 contains a path traversal and authorization bypass vulnerability in accountsController.uploadImag... |
| CVE-2026-114401 | MEDIUM | 5.3 | 0.4% | Oct 21, 2026 | Trudesk through 1.2.11 contains a regular expression injection vulnerability that allows unauthenticated attackers to en... |
| CVE-2026-114400 | HIGH | 7.5 | 0.6% | Oct 21, 2026 | Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers to download... |
| CVE-2026-114399 | MEDIUM | 6.5 | 0.5% | Oct 21, 2026 | Trudesk through 1.2.11 contains a path traversal vulnerability that allows administrators to delete arbitrary files by s... |
| CVE-2026-114398 | MEDIUM | 5.4 | 0.2% | Oct 21, 2026 | Trudesk through 1.2.11 contains an unrestricted file upload vulnerability that allows any authenticated user to place HT... |
| CVE-2026-114397 | HIGH | 7.4 | 0.6% | Oct 21, 2026 | Trudesk through 1.2.11 contains a missing authentication vulnerability in debug routes enabled whenever NODE_ENV is unse... |
| CVE-2026-114396 | HIGH | 7.1 | 0.5% | Oct 21, 2026 | Trudesk through 1.2.11 contains a server-side JavaScript injection vulnerability that allows authenticated users to inje... |
| CVE-2026-114395 | MEDIUM | 4.3 | 0.3% | Oct 21, 2026 | Trudesk through 1.2.11 contains an authorization bypass vulnerability in apiMessages.send that allows authenticated user... |
| CVE-2026-114394 | MEDIUM | 4.3 | 0.3% | Oct 21, 2026 | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to post content at... |
| CVE-2026-114393 | MEDIUM | 4.3 | 0.3% | Oct 21, 2026 | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to modify ticke... |
| CVE-2026-114392 | MEDIUM | 5.3 | 0.4% | Oct 21, 2026 | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to read tickets ou... |
| CVE-2026-114391 | HIGH | 7.1 | 0.3% | Oct 21, 2026 | ZenTao PMS before 22.3 contains an authorization bypass vulnerability in commonModel::isOpenMethod() that lets logged-in... |
| CVE-2026-114390 | MEDIUM | 5.3 | 0.2% | Oct 21, 2026 | Chamilo LMS from 2.0.0-alpha.1 before 2.0.0-RC.3 contains a missing authorization vulnerability in legacy AJAX handlers ... |
| CVE-2026-114389 | MEDIUM | 4.3 | 0.3% | Oct 21, 2026 | Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a missing authorization vulnerability in AiController::openAns... |
| CVE-2026-114388 | MEDIUM | 5.3 | 0.2% | Oct 21, 2026 | Chamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before 2.0.0-RC.3 contain a missing access control vulnerability in Gr... |