CVE Vulnerability Database
Search and browse 423,801 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111870 | MEDIUM | 5.3 | 0.4% | Oct 18, 2026 | A security flaw has been discovered in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a... |
| CVE-2026-111869 | MEDIUM | 5.3 | 0.5% | Oct 18, 2026 | A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endp... |
| CVE-2026-111997 | MEDIUM | 6.3 | 0.3% | Oct 18, 2026 | ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) v... |
| CVE-2026-111868 | MEDIUM | 6.3 | 0.2% | Oct 18, 2026 | A vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the function decode of the file pu... |
| CVE-2026-111866 | HIGH | 7.3 | 0.4% | Oct 18, 2026 | A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the fun... |
| CVE-2026-108117 | — | — | — | Oct 17, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-107772 | — | — | — | Oct 17, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-107345 | — | — | — | Oct 17, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-107274 | — | — | — | Oct 17, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-105391 | — | — | — | Oct 17, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-111865 | MEDIUM | 5.3 | 0.1% | Oct 17, 2026 | A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the fu... |
| CVE-2026-111934 | LOW | 3.7 | 0.1% | Oct 17, 2026 | Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware that trusts the leftmos... |
| CVE-2026-111933 | LOW | 3.7 | 0.2% | Oct 17, 2026 | Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration v... |
| CVE-2026-111932 | LOW | 3.4 | 0.2% | Oct 17, 2026 | Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a stored HTML inject... |
| CVE-2026-111931 | MEDIUM | 4.3 | 0.2% | Oct 17, 2026 | Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to... |
| CVE-2026-111930 | MEDIUM | 4.3 | 0.2% | Oct 17, 2026 | Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2/workspaces/{id}/acl endpoint... |
| CVE-2026-111929 | MEDIUM | 5.3 | 0.2% | Oct 17, 2026 | Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gR... |
| CVE-2026-111928 | MEDIUM | 5.4 | 0.1% | Oct 17, 2026 | Coder from 2.0.0 before 2.34.8 contains an incorrect authorization vulnerability in the acl_allow rule of coderd/rbac/po... |
| CVE-2026-111927 | HIGH | 7.7 | 0.2% | Oct 17, 2026 | Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains an improper hostnam... |
| CVE-2026-111926 | LOW | 3.3 | 0.1% | Oct 17, 2026 | Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest h... |
| CVE-2026-111924 | HIGH | 7.5 | 0.4% | Oct 17, 2026 | Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server m... |
| CVE-2026-111923 | HIGH | 7.5 | 0.4% | Oct 17, 2026 | Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that all... |
| CVE-2026-111922 | MEDIUM | 6.3 | 0.1% | Oct 17, 2026 | Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost and 127.0.0.1 port ... |
| CVE-2026-111921 | MEDIUM | 5.4 | 0.2% | Oct 17, 2026 | Vikunja 0.13.0 before 2.7.0 contains an incorrect authorization vulnerability that allows project members with Write per... |
| CVE-2026-111920 | MEDIUM | 4.3 | 0.2% | Oct 17, 2026 | Vikunja 2.6.0 contains a broken access control flaw in getProjectAccessForUser (pkg/models/project_access.go), which res... |