CVE Vulnerability Database
Search and browse 420,948 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-113708 | CRITICAL | 9.9 | — | Oct 20, 2026 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3.... |
| CVE-2026-113643 | MEDIUM | 4.3 | — | Oct 20, 2026 | A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProvider::get of the fil... |
| CVE-2026-111767 | HIGH | 8.6 | — | Oct 20, 2026 | MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to... |
| CVE-2026-111088 | MEDIUM | 6.5 | 0.2% | Oct 20, 2026 | A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen. |
| CVE-2026-100134 | HIGH | 8.8 | 0.7% | Oct 20, 2026 | Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th... |
| CVE-2026-100132 | MEDIUM | 4.3 | 0.4% | Oct 20, 2026 | Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A... |
| CVE-2026-113802 | CRITICAL | 9.8 | 2.9% | Oct 20, 2026 | Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 fu... |
| CVE-2026-113711 | HIGH | 7.5 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 3.7.0 of the imp... |
| CVE-2026-113710 | MEDIUM | 5.9 | 0.3% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the self-service password-change end... |
| CVE-2026-113672 | CRITICAL | 9.9 | 0.8% | Oct 20, 2026 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.... |
| CVE-2026-113671 | MEDIUM | 4.3 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI help... |
| CVE-2026-113670 | — | — | 0.3% | Oct 20, 2026 | Rejected reason: This CVE is a duplicate of another CVE. |
| CVE-2026-113669 | MEDIUM | 5.3 | 0.3% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 1.6.1 of passpor... |
| CVE-2026-113668 | MEDIUM | 5.3 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the REST route GET /api/v1/<piece-ty... |
| CVE-2026-113667 | MEDIUM | 5.3 | 0.4% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the Form add-on, 1.2.1 of login-rec... |
| CVE-2026-113666 | HIGH | 7.1 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 1.1.0 of db-connect and 4.33.0 of Apostrophe... |
| CVE-2026-113665 | LOW | 3.7 | 0.3% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the notification module exposes PATC... |
| CVE-2026-113664 | MEDIUM | 5.3 | 0.4% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authen... |
| CVE-2026-113662 | MEDIUM | 5.4 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authen... |
| CVE-2026-113661 | MEDIUM | 5.4 | 0.3% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer wi... |
| CVE-2026-113660 | MEDIUM | 4.3 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, ApostropheCMS’s exist-in-locale API ... |
| CVE-2026-113659 | MEDIUM | 6.1 | 0.3% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an unauthenticated attacker can send... |
| CVE-2026-113507 | MEDIUM | 5.3 | 0.4% | Oct 20, 2026 | A vulnerability was found in aaPanel up to 8.25.0. The impacted element is the function GetClientIp of the file class/pu... |
| CVE-2026-113506 | CRITICAL | 9.9 | — | Oct 20, 2026 | A vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShell of the file class... |
| CVE-2026-112861 | MEDIUM | 6.3 | — | Oct 20, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in xnau webdesign Participants Database participants-data... |