CVE Vulnerability Database
Search and browse 420,973 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-112148 | MEDIUM | 5.1 | 0.4% | Oct 20, 2026 | A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting (... |
| CVE-2026-110725 | LOW | 3.7 | 0.3% | Oct 20, 2026 | fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 throu... |
| CVE-2026-110306 | MEDIUM | 6.1 | 0.2% | Oct 20, 2026 | fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 throu... |
| CVE-2026-110180 | MEDIUM | 4.8 | 0.2% | Oct 20, 2026 | fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from... |
| CVE-2026-110095 | LOW | 3.7 | 0.2% | Oct 20, 2026 | fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 throu... |
| CVE-2026-97627 | HIGH | 8.6 | 0.3% | Oct 20, 2026 | Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A use... |
| CVE-2026-96903 | MEDIUM | 4.3 | 0.1% | Oct 20, 2026 | The Easy Property Listings WordPress plugin before 3.5.27 does not perform authorisation checks on several of its contac... |
| CVE-2026-96902 | MEDIUM | 5.3 | 0.2% | Oct 20, 2026 | The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it adds to the public R... |
| CVE-2026-93300 | HIGH | 7.5 | 0.4% | Oct 20, 2026 | The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email' parameter in all ve... |
| CVE-2026-100737 | MEDIUM | 6.9 | 0.2% | Oct 20, 2026 | Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A use... |
| CVE-2026-113386 | HIGH | 7.1 | 1.0% | Oct 20, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A remote authenticated at... |
| CVE-2026-113380 | CRITICAL | 9.3 | 0.9% | Oct 20, 2026 | In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability... |
| CVE-2026-109831 | MEDIUM | 5.1 | 0.2% | Oct 20, 2026 | UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may le... |
| CVE-2026-86467 | HIGH | 8.8 | 0.2% | Oct 20, 2026 | Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not bind the authentication response to the ... |
| CVE-2026-12489 | MEDIUM | 6.5 | 0.3% | Oct 20, 2026 | An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.4... |
| CVE-2026-75753 | MEDIUM | 5.3 | 0.2% | Oct 20, 2026 | Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send speci... |
| CVE-2026-17518 | HIGH | 8.2 | 0.1% | Oct 20, 2026 | Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrup... |
| CVE-2026-105299 | HIGH | 8.7 | 0.3% | Oct 20, 2026 | Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstrea... |
| CVE-2026-102438 | HIGH | 8.5 | 0.1% | Oct 20, 2026 | An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code wit... |
| CVE-2026-86981 | MEDIUM | 5.5 | 0.1% | Oct 20, 2026 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, mac... |
| CVE-2026-86979 | MEDIUM | 5.5 | 0.1% | Oct 20, 2026 | A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to a... |
| CVE-2026-86977 | HIGH | 7.5 | 0.3% | Oct 20, 2026 | An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An... |
| CVE-2026-86976 | MEDIUM | 5.5 | 0.1% | Oct 20, 2026 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS ... |
| CVE-2026-86975 | MEDIUM | 4.3 | 0.3% | Oct 20, 2026 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Go... |
| CVE-2026-86963 | MEDIUM | 5.9 | 0.3% | Oct 20, 2026 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7,... |