CVE Vulnerability Database
Search and browse 423,492 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111407 | MEDIUM | 6.5 | — | Oct 19, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS ... |
| CVE-2026-111406 | CRITICAL | 9.9 | — | Oct 19, 2026 | Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interac... |
| CVE-2026-111398 | HIGH | 7.7 | — | Oct 19, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT Norther Lights Produc... |
| CVE-2026-110898 | MEDIUM | 6.4 | — | Oct 19, 2026 | Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elemento... |
| CVE-2026-110887 | CRITICAL | 9.9 | — | Oct 19, 2026 | Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Remote C... |
| CVE-2026-110379 | HIGH | 7.1 | — | Oct 19, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Quiz Maker... |
| CVE-2026-108837 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Allocation of resources without limits or throttling vulnerability in Apache Kylin. Given an attacker has got project ad... |
| CVE-2026-108833 | HIGH | 7.5 | 0.3% | Oct 19, 2026 | Default startup profile miss security settings in Apache Kylin. Any deployment has security setting profile turned on do... |
| CVE-2026-108823 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin. The impact is minor ... |
| CVE-2026-108780 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin back... |
| CVE-2026-108776 | MEDIUM | 5.3 | 0.2% | Oct 19, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. The ... |
| CVE-2026-108771 | CRITICAL | 9.8 | 0.2% | Oct 19, 2026 | Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin. Impact most... |
| CVE-2026-108766 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | Missing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin services that are directly ... |
| CVE-2026-108764 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | Server-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin job service that are directly... |
| CVE-2026-108762 | HIGH | 7.3 | 0.2% | Oct 19, 2026 | Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin services that are dire... |
| CVE-2026-13695 | HIGH | 8.8 | 0.2% | Oct 19, 2026 | SQL injection (SQLi) vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects t... |
| CVE-2026-112180 | MEDIUM | 5.1 | 0.3% | Oct 19, 2026 | MISP contains a data integrity flaw in its event deletion logic. When a user deletes an event, several associated record... |
| CVE-2026-112179 | MEDIUM | 5.3 | 0.3% | Oct 19, 2026 | In MISP, the event synchronization process contained a logic error in the preparation of event reports for remote push. ... |
| CVE-2026-112178 | HIGH | 7.1 | 0.2% | Oct 19, 2026 | MISP contains an access control flaw in the proposal (shadow attribute) visibility logic. The authorization check accept... |
| CVE-2026-112161 | HIGH | 8.5 | 0.1% | Oct 19, 2026 | MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity.... |
| CVE-2026-112098 | MEDIUM | 6.3 | 0.3% | Oct 19, 2026 | A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/c... |
| CVE-2026-112097 | LOW | 3.5 | 0.2% | Oct 19, 2026 | A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file... |
| CVE-2026-112096 | LOW | 3.5 | 0.2% | Oct 19, 2026 | A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the fi... |
| CVE-2026-112095 | LOW | 3.5 | 0.2% | Oct 19, 2026 | A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the file /api/products_han... |
| CVE-2026-111438 | MEDIUM | 6.5 | 0.4% | Oct 19, 2026 | 在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hba_getauthmethod() 在处理 HADR/SW 复制发送方时，不要求 is_nod... |