CVE Vulnerability Database
Search and browse 420,818 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-113606 | HIGH | 7.1 | 0.3% | Oct 20, 2026 | Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to acces... |
| CVE-2026-113605 | HIGH | 7.2 | — | Oct 20, 2026 | Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent() that allo... |
| CVE-2026-113604 | MEDIUM | 5.5 | — | Oct 20, 2026 | Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates... |
| CVE-2026-113603 | MEDIUM | 6.5 | 0.3% | Oct 20, 2026 | The x402 SIWX server extension in @x402/extensions 2.3.1 through 2.28.0, x402 PyPI 2.11.0 through 2.25.0, and Go module ... |
| CVE-2026-113602 | MEDIUM | 5.3 | — | Oct 20, 2026 | json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode tr... |
| CVE-2026-113601 | MEDIUM | 4.3 | 0.3% | Oct 20, 2026 | Memos before 0.27.0 contains a missing authorization vulnerability in the ActivityService ListActivities and GetActivity... |
| CVE-2026-113600 | MEDIUM | 5.4 | 0.3% | Oct 20, 2026 | Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows authenticated users to... |
| CVE-2026-113599 | MEDIUM | 5.4 | — | Oct 20, 2026 | Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to creat... |
| CVE-2026-113598 | MEDIUM | 4.3 | 0.2% | Oct 20, 2026 | Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to delet... |
| CVE-2026-113597 | MEDIUM | 5.4 | — | Oct 20, 2026 | Blinko through 1.8.8 contains an insecure direct object reference vulnerability in the tag tRPC router that allows authe... |
| CVE-2026-113596 | LOW | 3.1 | 0.3% | Oct 20, 2026 | Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other us... |
| CVE-2026-113595 | MEDIUM | 4.3 | 0.3% | Oct 20, 2026 | Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC mutation that allows... |
| CVE-2026-113594 | MEDIUM | 5.4 | — | Oct 20, 2026 | Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change serv... |
| CVE-2026-113359 | MEDIUM | 4.3 | 0.3% | Oct 20, 2026 | Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field val... |
| CVE-2026-112956 | MEDIUM | 6.5 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, duplicate... |
| CVE-2026-112955 | MEDIUM | 6.5 | 0.5% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, an authen... |
| CVE-2026-112954 | MEDIUM | 5.3 | 0.3% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses pub... |
| CVE-2026-112953 | MEDIUM | 6 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictab... |
| CVE-2026-112952 | MEDIUM | 4.3 | 0.3% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, 'POST /api/v1/@apostrophecms/doc/slu... |
| CVE-2026-112951 | MEDIUM | 5.4 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing con... |
| CVE-2026-112950 | MEDIUM | 5.9 | 0.5% | Oct 20, 2026 | Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 4.1.11 until 4.1.12 and 5.0.3, is... |
| CVE-2026-112949 | MEDIUM | 4.7 | 0.2% | Oct 20, 2026 | Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 2.1.0-beta.7 until 4.1.12 and 5.0... |
| CVE-2026-112948 | MEDIUM | 6.5 | — | Oct 20, 2026 | Vitest is a testing framework powered by Vite. From 5.0.0-beta.6 until 5.0.5, Vitest dev servers can misapply server.fs.... |
| CVE-2026-112947 | MEDIUM | 6.3 | 0.4% | Oct 20, 2026 | Vite is a frontend tooling framework for JavaScript. From 8.2.0 until 8.2.4 and 8.3.3, the first 4 bytes of files outsid... |
| CVE-2026-112946 | MEDIUM | 6.3 | — | Oct 20, 2026 | Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, import analysis can... |