CVE Vulnerability Database
Search and browse 423,436 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-82166 | HIGH | 8.8 | — | Oct 19, 2026 | Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerabilit... |
| CVE-2026-71170 | HIGH | 7.8 | 0.2% | Oct 19, 2026 | Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileg... |
| CVE-2026-71169 | HIGH | 7 | 0.1% | Oct 19, 2026 | Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vu... |
| CVE-2026-112782 | HIGH | 7.5 | 0.3% | Oct 19, 2026 | Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability that allows anonymo... |
| CVE-2026-112781 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read protected... |
| CVE-2026-112780 | HIGH | 8.8 | 0.3% | Oct 19, 2026 | Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary publ... |
| CVE-2026-112779 | CRITICAL | 9.8 | 0.3% | Oct 19, 2026 | Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed langua... |
| CVE-2026-112778 | HIGH | 8.8 | 0.2% | Oct 19, 2026 | Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in th... |
| CVE-2026-112777 | HIGH | 7.2 | 0.5% | Oct 19, 2026 | Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() function because its ... |
| CVE-2026-112776 | CRITICAL | 9.8 | 0.3% | Oct 19, 2026 | Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-scoped GraphQL tokens... |
| CVE-2026-112775 | HIGH | 7.5 | 0.3% | Oct 19, 2026 | Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse verifi... |
| CVE-2026-112774 | HIGH | 7.2 | 0.5% | Oct 19, 2026 | Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated administrato... |
| CVE-2026-112773 | HIGH | 8.8 | — | Oct 19, 2026 | Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Pane... |
| CVE-2026-112772 | HIGH | 8.8 | 0.6% | Oct 19, 2026 | Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Pane... |
| CVE-2026-112771 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass because the column, conta... |
| CVE-2026-112770 | HIGH | 8.8 | 0.6% | Oct 19, 2026 | Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in the Twig group filte... |
| CVE-2026-112769 | LOW | 2.3 | 0.3% | Oct 19, 2026 | Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField class-level permissi... |
| CVE-2026-112768 | MEDIUM | 6.9 | — | Oct 19, 2026 | Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks against the target account during a user upd... |
| CVE-2026-112297 | MEDIUM | 4.3 | 0.3% | Oct 19, 2026 | A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the function LLMClient.chat ... |
| CVE-2026-112260 | HIGH | 7.1 | 0.2% | Oct 19, 2026 | A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read... |
| CVE-2026-112254 | MEDIUM | 4.3 | — | Oct 19, 2026 | A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is the function _fetch_h... |
| CVE-2026-111766 | LOW | 3.7 | 0.4% | Oct 19, 2026 | markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and t... |
| CVE-2024-54581 | — | — | — | Oct 19, 2026 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. |
| CVE-2026-112259 | MEDIUM | 5.5 | 0.1% | Oct 19, 2026 | A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer deref... |
| CVE-2026-112252 | HIGH | 7.3 | 0.3% | Oct 19, 2026 | A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Informat... |