CVE Vulnerability Database
Search and browse 381,206 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-65336 | CRITICAL | 9.8 | 0.2% | Jul 30, 2026 | Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /show_price_by_pdtId.php. |
| CVE-2026-67594 | CRITICAL | 9.8 | 0.5% | Jul 30, 2026 | Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated remote attac... |
| CVE-2026-67550 | MEDIUM | 5.7 | 0.1% | Jul 30, 2026 | re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2 validates lastIndex again... |
| CVE-2026-67530 | MEDIUM | 6.4 | 0.2% | Jul 30, 2026 | WACRM is a self-hostable CRM template for WhatsApp. In 0.7.0 and earlier, the automation send_webhook action in src/lib/... |
| CVE-2026-67529 | MEDIUM | 4.3 | 0.2% | Jul 30, 2026 | OpenProject is open-source, web-based project management software. Prior to 17.6.0, GET /api/v3/time_entries and GET /ap... |
| CVE-2026-67528 | MEDIUM | 4.3 | 0.2% | Jul 30, 2026 | OpenProject is open-source, web-based project management software. Prior to 17.6.0, GET /api/v3/custom_options/:id resol... |
| CVE-2026-67527 | HIGH | 7.6 | 0.2% | Jul 30, 2026 | OpenProject is open-source, web-based project management software. Prior to 17.6.0, PATCH /api/v3/work_packages/{id} acc... |
| CVE-2026-67208 | CRITICAL | 9.8 | — | Jul 30, 2026 | Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to exec... |
| CVE-2026-67207 | HIGH | 8.8 | 0.3% | Jul 30, 2026 | Wolf CMS through 0.8.3.1 contains an authorization bypass vulnerability in BackupRestoreController that allows authentic... |
| CVE-2026-67206 | HIGH | 8.8 | 0.4% | Jul 30, 2026 | Wolf CMS through 0.8.3.1 contains a remote code execution vulnerability in FileManagerController that allows authenticat... |
| CVE-2026-66756 | CRITICAL | 9.8 | 0.3% | Jul 30, 2026 | Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 ... |
| CVE-2026-66755 | HIGH | 7.5 | 0.2% | Jul 30, 2026 | Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.... |
| CVE-2026-65835 | MEDIUM | 6.6 | 0.2% | Jul 30, 2026 | Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.8, after the incomplete CVE... |
| CVE-2026-65834 | MEDIUM | 6.8 | — | Jul 30, 2026 | Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.8, CapsuleConfiguration.Spec.NodeMet... |
| CVE-2026-12946 | CRITICAL | 9.9 | 0.3% | Jul 30, 2026 | IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary code on the system, due to the i... |
| CVE-2026-11536 | HIGH | 8.5 | 0.3% | Jul 30, 2026 | IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execution vulnerability in the SOAP/JMX conne... |
| CVE-2026-10569 | MEDIUM | 4.3 | 0.2% | Jul 30, 2026 | IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 throug... |
| CVE-2025-51684 | MEDIUM | 6.1 | 0.2% | Jul 30, 2026 | CleverTap Web SDK v1.15.1 is vulnerable to Cross Site Scripting (XSS). The application does not sanitize untrusted data ... |
| CVE-2026-66416 | HIGH | 8.8 | 0.2% | Jul 30, 2026 | Leantime 3.6.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to perform stat... |
| CVE-2026-66415 | HIGH | 8.5 | — | Jul 30, 2026 | Leantime 3.6.2 contains a server-side request forgery and local file inclusion vulnerability that allows authenticated a... |
| CVE-2026-66066 | CRITICAL | 9.5 | 1.7% | Jul 30, 2026 | Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.... |
| CVE-2026-64870 | MEDIUM | 5.3 | — | Jul 30, 2026 | MaxKB is an open-source AI assistant for enterprise. In versions 2.0.0 through 2.10.4-lts, UpdateStoreTool.update_tool p... |
| CVE-2026-61536 | HIGH | 7.5 | 0.3% | Jul 30, 2026 | Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.3, banks parses Tool J... |
| CVE-2026-59881 | MEDIUM | 6.9 | — | Jul 30, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client ac... |
| CVE-2026-51272 | — | — | 0.4% | Jul 30, 2026 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further inv... |