CVE Vulnerability Database
Search and browse 423,492 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-112145 | HIGH | 7.3 | 0.4% | Oct 19, 2026 | A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerability affects the func... |
| CVE-2026-112144 | MEDIUM | 5.3 | — | Oct 19, 2026 | A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. T... |
| CVE-2026-112143 | HIGH | 7.3 | — | Oct 19, 2026 | A security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f42538... |
| CVE-2026-111939 | MEDIUM | 4.6 | — | Oct 19, 2026 | Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticated portal users to c... |
| CVE-2026-111938 | MEDIUM | 4.3 | — | Oct 19, 2026 | Frappe CRM before 1.74.0 contains a missing authorization vulnerability that allows authenticated Sales Users to modify ... |
| CVE-2026-111937 | MEDIUM | 5.4 | — | Oct 19, 2026 | Frappe CRM before 1.81.2 contains a missing authorization vulnerability that allows authenticated Sales Users to access ... |
| CVE-2026-111936 | MEDIUM | 4.3 | 0.3% | Oct 19, 2026 | Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validate_remote_url() in s... |
| CVE-2026-111935 | LOW | 2.6 | — | Oct 19, 2026 | NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attack... |
| CVE-2026-111925 | MEDIUM | 5.3 | — | Oct 19, 2026 | Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files ou... |
| CVE-2026-111915 | MEDIUM | 5.9 | — | Oct 19, 2026 | Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arb... |
| CVE-2026-111899 | MEDIUM | 4.3 | — | Oct 19, 2026 | KitchenOwl through 0.7.10 contains a server-side request forgery vulnerability in recipe import that allows authenticate... |
| CVE-2026-111883 | MEDIUM | 5.4 | 0.2% | Oct 19, 2026 | Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load test... |
| CVE-2026-111829 | MEDIUM | 6.5 | — | Oct 19, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-111828 | MEDIUM | 4.3 | — | Oct 19, 2026 | Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing... |
| CVE-2026-110902 | MEDIUM | 4.3 | — | Oct 19, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets all... |
| CVE-2026-110008 | MEDIUM | 4.2 | — | Oct 19, 2026 | @fastify/oauth2 is a Fastify wrapper for OAuth2 login flows. In versions 7.2.0 through 8.3.1, the state and code-verifie... |
| CVE-2026-38671 | MEDIUM | 6.1 | — | Oct 19, 2026 | Cross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service (StudentRegistrationSsb) 9.23 an... |
| CVE-2026-112214 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-contr... |
| CVE-2026-112199 | MEDIUM | 6.5 | — | Oct 19, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooComme... |
| CVE-2026-112142 | HIGH | 7.3 | — | Oct 19, 2026 | A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. A... |
| CVE-2026-112141 | HIGH | 7.3 | 0.4% | Oct 19, 2026 | A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. A... |
| CVE-2026-111845 | MEDIUM | 5.3 | — | Oct 19, 2026 | Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exp... |
| CVE-2026-111839 | MEDIUM | 5.3 | — | Oct 19, 2026 | Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration all... |
| CVE-2026-111836 | MEDIUM | 4.3 | — | Oct 19, 2026 | Missing Authorization vulnerability in WP ManageNinja LLC FluentCommunity fluent-community allows Exploiting Incorrectly... |
| CVE-2026-111831 | MEDIUM | 5.3 | — | Oct 19, 2026 | Missing Authorization vulnerability in WP ManageNinja LLC FluentForm fluentform allows Exploiting Incorrectly Configured... |