CVE Vulnerability Database
Search and browse 423,865 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111332 | LOW | 3.7 | 0.3% | Oct 15, 2026 | OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep sh... |
| CVE-2026-111331 | MEDIUM | 6.3 | 0.3% | Oct 15, 2026 | Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authentica... |
| CVE-2026-111330 | MEDIUM | 5.9 | 0.2% | Oct 15, 2026 | JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as ... |
| CVE-2026-111329 | CRITICAL | 9.8 | 0.5% | Oct 15, 2026 | JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote... |
| CVE-2026-111324 | MEDIUM | 5.3 | 0.3% | Oct 15, 2026 | rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwri... |
| CVE-2026-111323 | MEDIUM | 5.3 | 0.3% | Oct 15, 2026 | RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraf... |
| CVE-2026-111322 | CRITICAL | 9.8 | 0.7% | Oct 15, 2026 | Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to ac... |
| CVE-2026-111321 | MEDIUM | 5.4 | 0.2% | Oct 15, 2026 | TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make... |
| CVE-2026-111320 | MEDIUM | 6.5 | 0.3% | Oct 15, 2026 | ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attack... |
| CVE-2026-111313 | MEDIUM | 6.5 | 0.3% | Oct 15, 2026 | JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler th... |
| CVE-2026-111312 | HIGH | 7.7 | 0.5% | Oct 15, 2026 | OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] ... |
| CVE-2026-111284 | MEDIUM | 5.4 | 0.2% | Oct 15, 2026 | Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows authentic... |
| CVE-2026-111283 | CRITICAL | 9 | 0.5% | Oct 15, 2026 | BMC Helix Network Management on-prem 26.3.00 before 26.3.01 contains an authentication bypass vulnerability that allows ... |
| CVE-2026-111282 | HIGH | 8.2 | 0.5% | Oct 15, 2026 | Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthent... |
| CVE-2026-111281 | CRITICAL | 9.8 | 0.6% | Oct 15, 2026 | Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution vulnerability that a... |
| CVE-2026-111280 | HIGH | 7.4 | 0.4% | Oct 15, 2026 | snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicio... |
| CVE-2026-111279 | HIGH | 7.5 | 0.5% | Oct 15, 2026 | Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exh... |
| CVE-2026-111278 | MEDIUM | 5.3 | 0.3% | Oct 15, 2026 | NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form prot... |
| CVE-2026-111277 | HIGH | 7.5 | 0.4% | Oct 15, 2026 | NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that all... |
| CVE-2026-111275 | MEDIUM | 6.1 | 0.1% | Oct 15, 2026 | nifti_clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifti_convert_n2hdr2nim() ... |
| CVE-2026-111274 | MEDIUM | 5.5 | 0.2% | Oct 15, 2026 | unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c due to an in... |
| CVE-2026-111273 | MEDIUM | 6.1 | 0.1% | Oct 15, 2026 | unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, reachable th... |
| CVE-2026-111272 | MEDIUM | 5.5 | 0.1% | Oct 15, 2026 | LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote() that allows attackers to... |
| CVE-2026-111271 | MEDIUM | 5.5 | 0.1% | Oct 15, 2026 | libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_... |
| CVE-2026-111270 | MEDIUM | 6.1 | 0.1% | Oct 15, 2026 | libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src/load_dsm.cpp becaus... |