CVE Vulnerability Database
Search and browse 423,461 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-112307 | HIGH | 7.3 | 0.1% | Oct 19, 2026 | sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by su... |
| CVE-2026-112306 | HIGH | 7.2 | — | Oct 19, 2026 | NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged u... |
| CVE-2026-112305 | HIGH | 8.8 | — | Oct 19, 2026 | Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the task_runner role ... |
| CVE-2026-112304 | HIGH | 7.5 | 0.3% | Oct 19, 2026 | docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints ... |
| CVE-2026-112303 | MEDIUM | 4.3 | — | Oct 19, 2026 | GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gd_reso... |
| CVE-2026-112158 | MEDIUM | 6.5 | — | Oct 19, 2026 | A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the... |
| CVE-2026-112157 | LOW | 3.1 | 0.3% | Oct 19, 2026 | A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted element is the function re... |
| CVE-2026-112153 | HIGH | 7.3 | — | Oct 19, 2026 | A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This ... |
| CVE-2026-112152 | HIGH | 7.3 | — | Oct 19, 2026 | A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacf... |
| CVE-2026-111058 | CRITICAL | 9.8 | — | Oct 19, 2026 | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default ... |
| CVE-2026-111057 | CRITICAL | 10 | 0.4% | Oct 19, 2026 | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, ... |
| CVE-2026-111056 | MEDIUM | 6.9 | 0.3% | Oct 19, 2026 | FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated POST /... |
| CVE-2026-111053 | MEDIUM | 6.9 | — | Oct 19, 2026 | FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated api/gu... |
| CVE-2026-111046 | LOW | 2.3 | — | Oct 19, 2026 | FOSSBilling is an open source billing and client-management platform. From 0.8.4 until 0.8.6, hasManagePermission fails ... |
| CVE-2026-111045 | HIGH | 7.5 | — | Oct 19, 2026 | CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the w... |
| CVE-2026-109433 | MEDIUM | 6.5 | 0.3% | Oct 19, 2026 | Camunda 7.24.0 before 7.24.16 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit we... |
| CVE-2026-109432 | CRITICAL | 9.8 | — | Oct 19, 2026 | Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryV... |
| CVE-2026-109431 | HIGH | 8.1 | 0.4% | Oct 19, 2026 | Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-r... |
| CVE-2026-107571 | HIGH | 7.8 | 0.1% | Oct 19, 2026 | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a loca... |
| CVE-2026-107569 | HIGH | 7.5 | 0.4% | Oct 19, 2026 | Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticate... |
| CVE-2026-107568 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply action (6.0.0 through... |
| CVE-2026-107567 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote un... |
| CVE-2026-107566 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set header value action... |
| CVE-2026-107081 | CRITICAL | 9.8 | 0.3% | Oct 19, 2026 | SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/A... |
| CVE-2026-86375 | MEDIUM | 6.2 | — | Oct 19, 2026 | Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. A... |