CVE Vulnerability Database
Search and browse 420,973 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-112159 | MEDIUM | 5.5 | 0.9% | Oct 19, 2026 | A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of t... |
| CVE-2026-111862 | CRITICAL | 9.8 | 0.7% | Oct 19, 2026 | Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123 packages downloa... |
| CVE-2026-111750 | MEDIUM | 6.3 | 0.4% | Oct 19, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the pure Python parser ... |
| CVE-2026-111749 | LOW | 2.3 | 0.3% | Oct 19, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an e... |
| CVE-2026-111748 | MEDIUM | 6.3 | — | Oct 19, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an... |
| CVE-2026-111066 | HIGH | 8.2 | 0.4% | Oct 19, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart reque... |
| CVE-2026-111065 | MEDIUM | 6.9 | — | Oct 19, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can ... |
| CVE-2026-111064 | HIGH | 8.2 | 0.4% | Oct 19, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handl... |
| CVE-2026-111063 | MEDIUM | 6.3 | 0.2% | Oct 19, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute fo... |
| CVE-2026-111061 | MEDIUM | 4.3 | — | Oct 19, 2026 | russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the a... |
| CVE-2026-111059 | MEDIUM | 6.1 | 0.3% | Oct 19, 2026 | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.11,... |
| CVE-2026-10743 | HIGH | 8.8 | 0.3% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation o... |
| CVE-2026-10574 | HIGH | 8.8 | 0.3% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a... |
| CVE-2026-10572 | HIGH | 8.8 | 0.3% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a... |
| CVE-2026-107188 | CRITICAL | 9.6 | 0.4% | Oct 19, 2026 | A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be ... |
| CVE-2026-107187 | HIGH | 8.5 | 0.3% | Oct 19, 2026 | A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workfl... |
| CVE-2026-107186 | HIGH | 8.6 | 0.4% | Oct 19, 2026 | An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can ... |
| CVE-2026-107083 | CRITICAL | 9.8 | — | Oct 19, 2026 | SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/r... |
| CVE-2026-107082 | HIGH | 8.8 | 0.2% | Oct 19, 2026 | Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection vi... |
| CVE-2026-103038 | HIGH | 8.6 | 3.4% | Oct 19, 2026 | PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP serv... |
| CVE-2025-7203 | MEDIUM | 4.9 | 0.2% | Oct 19, 2026 | The Management Console and product files expose sensitive data, including remote log server credentials, truststore pass... |
| CVE-2025-7043 | MEDIUM | 5.4 | 0.2% | Oct 19, 2026 | The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be treated as a valid ac... |
| CVE-2025-6623 | MEDIUM | 4.3 | 0.3% | Oct 19, 2026 | The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowin... |
| CVE-2025-13591 | MEDIUM | 5.3 | 0.3% | Oct 19, 2026 | The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does n... |
| CVE-2025-13173 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | Tokens associated with user sessions are not revoked when the corresponding user session is terminated, unless another S... |