CVE Vulnerability Database
Search and browse 420,948 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-113611 | MEDIUM | 4.9 | 0.4% | Oct 20, 2026 | Outline before 1.8.0 contains an improper access revocation vulnerability that allows deleted administrators to keep rec... |
| CVE-2026-113610 | MEDIUM | 5.4 | — | Oct 20, 2026 | Xen Orchestra before 6.9.0 contains an authorization bypass vulnerability in the xo-server user.set API method that allo... |
| CVE-2026-113609 | LOW | 3.3 | — | Oct 20, 2026 | Bandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers ... |
| CVE-2026-113608 | MEDIUM | 5.3 | 0.3% | Oct 20, 2026 | Configurable Reports block for Moodle (moodle-block_configurablereports) before 5.3.1 contains an sql injection vulnerab... |
| CVE-2026-113607 | MEDIUM | 6.5 | — | Oct 20, 2026 | Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authentica... |
| CVE-2026-113606 | HIGH | 7.1 | 0.3% | Oct 20, 2026 | Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to acces... |
| CVE-2026-113605 | HIGH | 7.2 | — | Oct 20, 2026 | Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent() that allo... |
| CVE-2026-113604 | MEDIUM | 5.5 | — | Oct 20, 2026 | Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates... |
| CVE-2026-113603 | MEDIUM | 6.5 | 0.3% | Oct 20, 2026 | The x402 SIWX server extension in @x402/extensions 2.3.1 through 2.28.0, x402 PyPI 2.11.0 through 2.25.0, and Go module ... |
| CVE-2026-113602 | MEDIUM | 5.3 | — | Oct 20, 2026 | json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode tr... |
| CVE-2026-113601 | MEDIUM | 4.3 | 0.3% | Oct 20, 2026 | Memos before 0.27.0 contains a missing authorization vulnerability in the ActivityService ListActivities and GetActivity... |
| CVE-2026-113600 | MEDIUM | 5.4 | 0.3% | Oct 20, 2026 | Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows authenticated users to... |
| CVE-2026-113599 | MEDIUM | 5.4 | — | Oct 20, 2026 | Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to creat... |
| CVE-2026-113598 | MEDIUM | 4.3 | 0.2% | Oct 20, 2026 | Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to delet... |
| CVE-2026-113597 | MEDIUM | 5.4 | — | Oct 20, 2026 | Blinko through 1.8.8 contains an insecure direct object reference vulnerability in the tag tRPC router that allows authe... |
| CVE-2026-113596 | LOW | 3.1 | 0.3% | Oct 20, 2026 | Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other us... |
| CVE-2026-113595 | MEDIUM | 4.3 | 0.3% | Oct 20, 2026 | Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC mutation that allows... |
| CVE-2026-113594 | MEDIUM | 5.4 | — | Oct 20, 2026 | Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change serv... |
| CVE-2026-113359 | MEDIUM | 4.3 | 0.3% | Oct 20, 2026 | Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field val... |
| CVE-2026-112956 | MEDIUM | 6.5 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, duplicate... |
| CVE-2026-112955 | MEDIUM | 6.5 | 0.5% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, an authen... |
| CVE-2026-112954 | MEDIUM | 5.3 | 0.3% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses pub... |
| CVE-2026-112953 | MEDIUM | 6 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictab... |
| CVE-2026-112952 | MEDIUM | 4.3 | 0.3% | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, 'POST /api/v1/@apostrophecms/doc/slu... |
| CVE-2026-112951 | MEDIUM | 5.4 | — | Oct 20, 2026 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing con... |