CVE Vulnerability Database
Search and browse 423,412 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-113385 | MEDIUM | 5.3 | — | Oct 20, 2026 | A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function Cla... |
| CVE-2026-105949 | HIGH | 8.8 | 0.3% | Oct 20, 2026 | Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all ... |
| CVE-2026-105312 | CRITICAL | 9.9 | 0.3% | Oct 20, 2026 | A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbi... |
| CVE-2026-105311 | HIGH | 7.7 | 0.3% | Oct 20, 2026 | The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console custo... |
| CVE-2026-9589 | CRITICAL | 9.3 | — | Oct 20, 2026 | Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc. Unblu Spark 7.0 ... |
| CVE-2026-113384 | MEDIUM | 4.3 | 0.3% | Oct 20, 2026 | A flaw has been found in Optimal IdM OptimalCloud 5.0. This vulnerability affects unknown code of the file /v5.0/social.... |
| CVE-2026-113383 | MEDIUM | 4.3 | — | Oct 20, 2026 | A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the file /v5.0/webapps/pag... |
| CVE-2026-113382 | MEDIUM | 6.3 | — | Oct 20, 2026 | A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArch... |
| CVE-2026-113358 | HIGH | 7.5 | — | Oct 20, 2026 | LavaLite CMS through 10.1.2 contains a missing authentication vulnerability in the Filer module that allows unauthentica... |
| CVE-2026-113357 | LOW | 3.5 | — | Oct 20, 2026 | @e2e-dev/github before 0.4.1 contains an improper authorization vulnerability that allows pull request commenters to hij... |
| CVE-2026-113356 | HIGH | 7.5 | — | Oct 20, 2026 | DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText() that passes draft fil... |
| CVE-2026-113355 | MEDIUM | 4.8 | — | Oct 20, 2026 | Chatwoot before 4.14.0 contains a stored cross-site scripting vulnerability that allows account administrators to inject... |
| CVE-2026-113354 | MEDIUM | 6.5 | 0.2% | Oct 20, 2026 | Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permis... |
| CVE-2026-113353 | MEDIUM | 5.4 | — | Oct 20, 2026 | LearnPress before 4.4.10 contains a missing authorization vulnerability in the admin_course_editor, admin_quiz_editor an... |
| CVE-2026-113352 | HIGH | 7.5 | — | Oct 20, 2026 | uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending ... |
| CVE-2026-113351 | HIGH | 7.5 | 0.5% | Oct 20, 2026 | libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte c... |
| CVE-2026-113350 | MEDIUM | 5.4 | — | Oct 20, 2026 | react-admin before 5.15.5 contains a stored cross-site scripting vulnerability that allows attackers to inject scripts b... |
| CVE-2026-113349 | MEDIUM | 4.3 | 0.2% | Oct 20, 2026 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in CalendarUI::onEditEvent() and onDeleteEvent() t... |
| CVE-2026-112787 | MEDIUM | 4.3 | — | Oct 20, 2026 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in ReportsUI::handleRequest() that allows authenti... |
| CVE-2026-112786 | MEDIUM | 5.4 | — | Oct 20, 2026 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest() that allows low-privi... |
| CVE-2026-112785 | MEDIUM | 4.3 | — | Oct 20, 2026 | OpenCATS before 0.10.0 contains a missing authorization vulnerability that allows READ-level users to create, rename, de... |
| CVE-2026-112784 | MEDIUM | 4.3 | — | Oct 20, 2026 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/testEmailSettings.php that allows any auth... |
| CVE-2026-112783 | MEDIUM | 4.3 | 0.2% | Oct 20, 2026 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/deleteActivity.php and ajax/editActivity.p... |
| CVE-2026-108089 | HIGH | 7.5 | — | Oct 20, 2026 | ** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an unauthorized control sphere vulnerability... |
| CVE-2026-108088 | HIGH | 7.5 | 0.2% | Oct 20, 2026 | ** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using... |