CVE Vulnerability Database
Search and browse 423,461 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-112329 | MEDIUM | 4.3 | 0.2% | Oct 19, 2026 | The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the legacy save_new_mess... |
| CVE-2026-112328 | MEDIUM | 4.3 | — | Oct 19, 2026 | The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the add_new_module_term ... |
| CVE-2026-112151 | HIGH | 7.3 | — | Oct 19, 2026 | A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Aff... |
| CVE-2026-112150 | HIGH | 7.3 | 0.3% | Oct 19, 2026 | A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4... |
| CVE-2026-112149 | HIGH | 7.3 | — | Oct 19, 2026 | A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Thi... |
| CVE-2026-112147 | MEDIUM | 5.3 | — | Oct 19, 2026 | A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an unknown function of... |
| CVE-2026-8168 | HIGH | 7.1 | — | Oct 19, 2026 | Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to ca... |
| CVE-2026-112296 | CRITICAL | 9.8 | 0.4% | Oct 19, 2026 | FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers... |
| CVE-2026-112295 | MEDIUM | 5.4 | 0.3% | Oct 19, 2026 | FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated users to overwrite pro... |
| CVE-2026-112294 | MEDIUM | 4.3 | 0.2% | Oct 19, 2026 | FlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionService.counter() that allows aut... |
| CVE-2026-112293 | MEDIUM | 5.4 | 0.2% | Oct 19, 2026 | BoxyHQ Enterprise SaaS Starter Kit through 1.6.0 contains a missing authorization vulnerability that allows non-owner te... |
| CVE-2026-112292 | CRITICAL | 9.8 | — | Oct 19, 2026 | CheckCle through 1.6.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read, mod... |
| CVE-2026-112291 | MEDIUM | 5.3 | — | Oct 19, 2026 | Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 lacks authentication and admin checks on the TaskResource inde... |
| CVE-2026-112290 | MEDIUM | 4.7 | — | Oct 19, 2026 | Intelligence Community UI Kit @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 contains a DOM-based cr... |
| CVE-2026-112289 | MEDIUM | 5.4 | — | Oct 19, 2026 | Koalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff users to inject script b... |
| CVE-2026-112288 | LOW | 3.3 | 0.2% | Oct 19, 2026 | Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permis... |
| CVE-2026-112287 | HIGH | 7.1 | — | Oct 19, 2026 | Krayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailController write actions that... |
| CVE-2026-112286 | MEDIUM | 6.5 | — | Oct 19, 2026 | Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenti... |
| CVE-2026-112285 | MEDIUM | 4.3 | — | Oct 19, 2026 | Thelia before 3.1.5 and 3.2.x before 3.2.4 contains a business logic vulnerability that allows authenticated customers t... |
| CVE-2026-112284 | LOW | 3.3 | — | Oct 19, 2026 | libaribcaption 1.1.0 through 1.1.2 contains a global out-of-bounds read in DecoderImpl::HandleGLGR() that reads past the... |
| CVE-2026-112283 | MEDIUM | 5.5 | 0.1% | Oct 19, 2026 | VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in _parse_extent_start_points(... |
| CVE-2026-112282 | MEDIUM | 5.5 | — | Oct 19, 2026 | VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi_access_point() that allows attacke... |
| CVE-2026-112281 | MEDIUM | 6.1 | — | Oct 19, 2026 | libaribb24 (aribb24) through 1.0.3 contains a stack-based buffer overflow vulnerability in decoder_handle_csi() in src/d... |
| CVE-2026-112280 | MEDIUM | 6.1 | — | Oct 19, 2026 | libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overflow vulnerability in src/parser.c that allows attac... |
| CVE-2026-112279 | MEDIUM | 6.5 | — | Oct 19, 2026 | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_bmpcache2() in orders.c that allows m... |