CVE Vulnerability Database
Search and browse 420,973 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-113392 | HIGH | 7.4 | — | Oct 20, 2026 | A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the fil... |
| CVE-2026-113391 | CRITICAL | 9.9 | — | Oct 20, 2026 | A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the ... |
| CVE-2026-113390 | CRITICAL | 9.9 | 2.1% | Oct 20, 2026 | A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of th... |
| CVE-2026-105941 | HIGH | 8.1 | — | Oct 20, 2026 | The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes withou... |
| CVE-2026-18205 | MEDIUM | 6.1 | — | Oct 20, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax Informatic... |
| CVE-2026-14933 | HIGH | 8.6 | — | Oct 20, 2026 | Cross-site scripting in the embedded co-browsing feature in Unblu inc. Unblu Spark 7.0 through 7.57.7 and 8.0 through 8.... |
| CVE-2026-113583 | MEDIUM | 6.1 | 0.3% | Oct 20, 2026 | Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers ... |
| CVE-2026-113496 | MEDIUM | 5 | 0.1% | Oct 20, 2026 | A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings, the configured passw... |
| CVE-2026-113495 | MEDIUM | 5 | 0.2% | Oct 20, 2026 | A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens are passed as command... |
| CVE-2026-113389 | CRITICAL | 9.9 | — | Oct 20, 2026 | A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function ... |
| CVE-2026-113388 | MEDIUM | 4.3 | — | Oct 20, 2026 | A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the ... |
| CVE-2026-113385 | MEDIUM | 5.3 | — | Oct 20, 2026 | A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function Cla... |
| CVE-2026-105949 | HIGH | 8.8 | 0.3% | Oct 20, 2026 | Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all ... |
| CVE-2026-105312 | CRITICAL | 9.9 | 0.3% | Oct 20, 2026 | A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbi... |
| CVE-2026-105311 | HIGH | 7.7 | 0.3% | Oct 20, 2026 | The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console custo... |
| CVE-2026-9589 | CRITICAL | 9.3 | — | Oct 20, 2026 | Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc. Unblu Spark 7.0 ... |
| CVE-2026-113384 | MEDIUM | 4.3 | 0.3% | Oct 20, 2026 | A flaw has been found in Optimal IdM OptimalCloud 5.0. This vulnerability affects unknown code of the file /v5.0/social.... |
| CVE-2026-113383 | MEDIUM | 4.3 | — | Oct 20, 2026 | A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the file /v5.0/webapps/pag... |
| CVE-2026-113382 | MEDIUM | 6.3 | — | Oct 20, 2026 | A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArch... |
| CVE-2026-113358 | HIGH | 7.5 | — | Oct 20, 2026 | LavaLite CMS through 10.1.2 contains a missing authentication vulnerability in the Filer module that allows unauthentica... |
| CVE-2026-113357 | LOW | 3.5 | — | Oct 20, 2026 | @e2e-dev/github before 0.4.1 contains an improper authorization vulnerability that allows pull request commenters to hij... |
| CVE-2026-113356 | HIGH | 7.5 | — | Oct 20, 2026 | DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText() that passes draft fil... |
| CVE-2026-113355 | MEDIUM | 4.8 | — | Oct 20, 2026 | Chatwoot before 4.14.0 contains a stored cross-site scripting vulnerability that allows account administrators to inject... |
| CVE-2026-113354 | MEDIUM | 6.5 | 0.2% | Oct 20, 2026 | Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permis... |
| CVE-2026-113353 | MEDIUM | 5.4 | — | Oct 20, 2026 | LearnPress before 4.4.10 contains a missing authorization vulnerability in the admin_course_editor, admin_quiz_editor an... |