CVE Vulnerability Database
Search and browse 423,888 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-36436 | HIGH | 7.5 | 0.3% | Oct 15, 2026 | An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configu... |
| CVE-2026-111252 | MEDIUM | 6.5 | 0.2% | Oct 15, 2026 | A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNM... |
| CVE-2026-111235 | CRITICAL | 9.1 | 0.4% | Oct 15, 2026 | An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /... |
| CVE-2026-111234 | MEDIUM | 5.9 | 0.3% | Oct 15, 2026 | SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious feed servers to read server files... |
| CVE-2026-111233 | MEDIUM | 6.1 | 0.5% | Oct 15, 2026 | Netgate pfSense CE 2.7.1 through 2.9.0 contains a reflected cross-site scripting vulnerability in firewall_rules.php tha... |
| CVE-2026-111232 | MEDIUM | 4.8 | 0.9% | Oct 15, 2026 | Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated us... |
| CVE-2026-111231 | — | — | 0.8% | Oct 15, 2026 | Rejected reason: This CVE ID has been rejected because it does not describe a security vulnerability. |
| CVE-2026-111230 | MEDIUM | 4.9 | 0.8% | Oct 15, 2026 | Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client ... |
| CVE-2026-111229 | — | — | 6.4% | Oct 15, 2026 | Rejected reason: This CVE ID has been rejected because it does not describe a security vulnerability. |
| CVE-2026-111228 | MEDIUM | 5.5 | 0.8% | Oct 15, 2026 | Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbound_advanced.php tha... |
| CVE-2026-111227 | MEDIUM | 5.5 | 1.8% | Oct 15, 2026 | Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in services_unbound_acls.php that allows authen... |
| CVE-2026-111226 | HIGH | 7.2 | 6.5% | Oct 15, 2026 | pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authenticated WebGUI users wit... |
| CVE-2026-111225 | HIGH | 8.8 | 2.7% | Oct 15, 2026 | Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that a... |
| CVE-2026-111224 | HIGH | 7.5 | 5.4% | Oct 15, 2026 | pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect_async.sh script t... |
| CVE-2026-111223 | HIGH | 7.2 | 0.8% | Oct 15, 2026 | Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows authenticated users ... |
| CVE-2026-111222 | HIGH | 7.2 | 1.0% | Oct 15, 2026 | Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General... |
| CVE-2026-111221 | — | — | 0.9% | Oct 15, 2026 | Rejected reason: This CVE ID has been rejected because it does not describe a security vulnerability. |
| CVE-2026-111220 | HIGH | 7.2 | — | Oct 15, 2026 | pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticate... |
| CVE-2026-111219 | HIGH | 7.2 | 0.9% | Oct 15, 2026 | Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in services_pppoe_edit.php that allows privi... |
| CVE-2026-111218 | HIGH | 7.2 | 8.4% | Oct 15, 2026 | Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users wi... |
| CVE-2026-111217 | HIGH | 7.2 | 7.1% | Oct 15, 2026 | Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Vir... |
| CVE-2026-111216 | HIGH | 7.2 | 4.7% | Oct 15, 2026 | Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with gat... |
| CVE-2026-111215 | HIGH | 7.2 | 7.1% | Oct 15, 2026 | Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execu... |
| CVE-2026-111214 | HIGH | 7.2 | 8.6% | Oct 15, 2026 | Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users wi... |
| CVE-2026-111172 | MEDIUM | 5.3 | 0.4% | Oct 15, 2026 | @casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields() that allows attackers t... |