CVE Vulnerability Database
Search and browse 423,806 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111699 | MEDIUM | 4.8 | 0.3% | Oct 16, 2026 | Niefy wx-api through 0.8.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to impe... |
| CVE-2026-111698 | MEDIUM | 6.5 | — | Oct 16, 2026 | HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp PayController.xcxRechar... |
| CVE-2026-111697 | MEDIUM | 6.5 | — | Oct 16, 2026 | HUIZHI ChargeOS cloud through 3.0.9 contains an insecure direct object reference vulnerability in the hcp-mp MeControlle... |
| CVE-2026-111696 | MEDIUM | 6.5 | — | Oct 16, 2026 | data-platform-open through commit efeacd3 uses a hardcoded, publicly known default AES key in AesPasswordEncAndDecServic... |
| CVE-2026-111695 | HIGH | 7.1 | 0.3% | Oct 16, 2026 | Shaiwz data-platform-open through commit efeacd3 contains an insecure direct object reference vulnerability that allows ... |
| CVE-2026-111694 | MEDIUM | 5.3 | 0.4% | Oct 16, 2026 | qKnow through 2.4.3 contains a missing authentication vulnerability that allows unauthenticated remote attackers to acce... |
| CVE-2026-111693 | CRITICAL | 9.8 | 0.4% | Oct 16, 2026 | DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unauthenticated a... |
| CVE-2026-111692 | CRITICAL | 9.8 | — | Oct 16, 2026 | DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers... |
| CVE-2026-111691 | HIGH | 7.4 | — | Oct 16, 2026 | WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows attackers to impersonate any t... |
| CVE-2026-111690 | CRITICAL | 9.8 | 0.4% | Oct 16, 2026 | Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to... |
| CVE-2026-111689 | MEDIUM | 4.3 | 0.3% | Oct 16, 2026 | Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to read user r... |
| CVE-2026-111688 | MEDIUM | 4.3 | — | Oct 16, 2026 | Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to evade role ... |
| CVE-2026-111687 | CRITICAL | 9.8 | — | Oct 16, 2026 | WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to ... |
| CVE-2026-111686 | HIGH | 7.5 | — | Oct 16, 2026 | IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL ... |
| CVE-2026-111685 | HIGH | 7.5 | 0.4% | Oct 16, 2026 | IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL ... |
| CVE-2026-111684 | HIGH | 8.3 | 0.2% | Oct 16, 2026 | Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated workspace members to v... |
| CVE-2026-111683 | MEDIUM | 5.4 | 0.2% | Oct 16, 2026 | Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staff users to... |
| CVE-2026-111682 | MEDIUM | 6.5 | — | Oct 16, 2026 | EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to... |
| CVE-2026-111681 | HIGH | 8.8 | — | Oct 16, 2026 | EFAK through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to manag... |
| CVE-2026-111680 | HIGH | 8.3 | 0.3% | Oct 16, 2026 | APIPark through 1.9.7-beta contains an authorization bypass vulnerability that allows authenticated team managers to acc... |
| CVE-2026-111679 | MEDIUM | 5.4 | 0.2% | Oct 16, 2026 | Ekko Studio through 0.7.36 contains a missing authorization vulnerability that allows any authenticated non-super_admin ... |
| CVE-2026-111678 | LOW | 3.3 | 0.2% | Oct 16, 2026 | Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8ChrInfo in prop8.c beca... |
| CVE-2026-111677 | MEDIUM | 5.5 | 0.2% | Oct 16, 2026 | Antiword through 0.37 contains a heap out-of-bounds read vulnerability in vGet8LstInfo in prop8.c caused by an inverted ... |
| CVE-2026-111676 | MEDIUM | 4.3 | — | Oct 16, 2026 | Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability that allows authenticated agents to read tic... |
| CVE-2026-111675 | HIGH | 7.4 | 0.4% | Oct 16, 2026 | Course-tencent-cloud through 2.0.1 contains an improper restriction of authentication attempts vulnerability that allows... |