CVE Vulnerability Database
Search and browse 420,973 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-112772 | HIGH | 8.8 | 0.6% | Oct 19, 2026 | Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Pane... |
| CVE-2026-112771 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass because the column, conta... |
| CVE-2026-112770 | HIGH | 8.8 | 0.6% | Oct 19, 2026 | Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in the Twig group filte... |
| CVE-2026-112769 | LOW | 2.3 | 0.3% | Oct 19, 2026 | Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField class-level permissi... |
| CVE-2026-112768 | MEDIUM | 6.9 | — | Oct 19, 2026 | Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks against the target account during a user upd... |
| CVE-2026-112297 | MEDIUM | 4.3 | 0.3% | Oct 19, 2026 | A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the function LLMClient.chat ... |
| CVE-2026-112260 | HIGH | 7.1 | 0.2% | Oct 19, 2026 | A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read... |
| CVE-2026-112254 | MEDIUM | 4.3 | — | Oct 19, 2026 | A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is the function _fetch_h... |
| CVE-2026-111766 | LOW | 3.7 | 0.4% | Oct 19, 2026 | markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and t... |
| CVE-2024-54581 | — | — | — | Oct 19, 2026 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. |
| CVE-2026-112259 | MEDIUM | 5.5 | 0.1% | Oct 19, 2026 | A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer deref... |
| CVE-2026-112252 | HIGH | 7.3 | 0.3% | Oct 19, 2026 | A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Informat... |
| CVE-2026-112251 | MEDIUM | 4.3 | — | Oct 19, 2026 | A vulnerability was detected in antoinersx clawhost up to 0.0.45. This affects the function handleRequest of the file ap... |
| CVE-2026-112249 | LOW | 2.4 | 0.4% | Oct 19, 2026 | A vulnerability was detected in grandnode grandnode2 up to 2.3.0. Affected is the function Html.Raw of the file src/Web/... |
| CVE-2026-110688 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer pe... |
| CVE-2026-110687 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cm... |
| CVE-2026-110686 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding i... |
| CVE-2026-110685 | CRITICAL | 9.1 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in... |
| CVE-2026-110684 | HIGH | 8.1 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding value... |
| CVE-2026-110682 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level number... |
| CVE-2026-110681 | HIGH | 8.1 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a n... |
| CVE-2026-110680 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during can... |
| CVE-2026-110678 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in i... |
| CVE-2026-110677 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as... |
| CVE-2026-110676 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal dig... |