CVE Vulnerability Database
Search and browse 420,948 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111756 | HIGH | 8.2 | 0.4% | Oct 20, 2026 | follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to... |
| CVE-2026-105772 | CRITICAL | 9.1 | — | Oct 20, 2026 | Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 allows... |
| CVE-2026-92539 | MEDIUM | 6.7 | — | Oct 20, 2026 | A service account with user-management permissions in one organization can read, modify, disable or delete users belongi... |
| CVE-2026-28331 | MEDIUM | 4.4 | — | Oct 20, 2026 | SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated p... |
| CVE-2026-28330 | MEDIUM | 4.6 | — | Oct 20, 2026 | SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that ... |
| CVE-2026-28329 | MEDIUM | 6.4 | — | Oct 20, 2026 | SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that... |
| CVE-2026-28328 | HIGH | 8.8 | — | Oct 20, 2026 | SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privil... |
| CVE-2026-113658 | HIGH | 7.5 | 0.5% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the unauthenticated Rich Text CSV co... |
| CVE-2026-113657 | LOW | 3.7 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer wi... |
| CVE-2026-113656 | MEDIUM | 5.3 | 0.4% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the ApostropheCMS Form add-on, its ... |
| CVE-2026-113655 | MEDIUM | 4.3 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an authenticated editor with legitim... |
| CVE-2026-113654 | MEDIUM | 5.3 | 0.3% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer wi... |
| CVE-2026-113653 | MEDIUM | 6.9 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, viewRole is not applied to anonymous... |
| CVE-2026-113652 | MEDIUM | 5.6 | 0.3% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadfs Azure backend leak... |
| CVE-2026-113651 | LOW | 3.3 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library. Prior to up... |
| CVE-2026-113650 | MEDIUM | 5.3 | 0.4% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. In sanitize-html 2.18.0, when an <iframe> is not allo... |
| CVE-2026-113649 | MEDIUM | 6.5 | 0.2% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module and 4.34.0... |
| CVE-2026-113648 | LOW | 3.1 | 0.3% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, the API e... |
| CVE-2026-113505 | MEDIUM | 4.3 | 0.4% | Oct 20, 2026 | A flaw has been found in aaPanel up to 8.25.0. Impacted is the function send_file of the file BTPanel/routes/v2.py of th... |
| CVE-2026-112958 | MEDIUM | 5.4 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a project-defined free-form widget s... |
| CVE-2026-112957 | MEDIUM | 4.3 | 0.3% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the getOne REST endpoint for pages d... |
| CVE-2026-95109 | HIGH | 8.5 | — | Oct 20, 2026 | The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byte. The c... |
| CVE-2026-95108 | MEDIUM | 6.8 | — | Oct 20, 2026 | One logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not one.... |
| CVE-2026-95107 | HIGH | 7 | — | Oct 20, 2026 | A ThreadX module chooses `object_size` when it calls `txm_module_object_allocate`. The Module Manager adds its own 16-by... |
| CVE-2026-94202 | MEDIUM | 4.8 | — | Oct 20, 2026 | The Module Manager's block-pool create dispatcher proved that two `ALIGN_TYPE` words of the extra-parameter array a memo... |