CVE Vulnerability Database
Search and browse 423,888 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-106604 | MEDIUM | 6.5 | 0.2% | Oct 15, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooComme... |
| CVE-2026-105660 | MEDIUM | 6.9 | 0.5% | Oct 15, 2026 | Improper Validation of Syntactic Correctness of Input vulnerability in mtrudel bandit allows an unauthenticated remote a... |
| CVE-2026-104828 | HIGH | 7.2 | 0.3% | Oct 15, 2026 | HtmlUnit Neko is an HtmlUnit adaptation of NekoHTML. Prior to 5.4.0, HTMLWriterFilter writes decoded TEXTAREA and TITLE ... |
| CVE-2026-104827 | HIGH | 7.5 | 0.4% | Oct 15, 2026 | react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. From 1.0.0 until 1.11.1, Re... |
| CVE-2026-104150 | HIGH | 8.7 | 0.4% | Oct 15, 2026 | AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.2 and 9.1.1, the re... |
| CVE-2026-103083 | MEDIUM | 5.4 | — | Oct 15, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Produ... |
| CVE-2026-102946 | CRITICAL | 9.1 | — | Oct 15, 2026 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standar... |
| CVE-2026-84731 | CRITICAL | 9.8 | 1.3% | Oct 15, 2026 | An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nut... |
| CVE-2026-61702 | MEDIUM | 5.3 | 0.4% | Oct 15, 2026 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, co... |
| CVE-2026-55876 | LOW | 3.5 | 0.2% | Oct 15, 2026 | Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, the POST /planner/att... |
| CVE-2026-55875 | MEDIUM | 4.3 | 0.2% | Oct 15, 2026 | Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, any authenticated use... |
| CVE-2026-55480 | MEDIUM | 5.7 | 0.2% | Oct 15, 2026 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, co... |
| CVE-2026-55467 | LOW | 2.5 | 0.2% | Oct 15, 2026 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, th... |
| CVE-2026-55453 | LOW | 3.3 | 0.2% | Oct 15, 2026 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, th... |
| CVE-2026-55414 | MEDIUM | 5.3 | 0.4% | Oct 15, 2026 | NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, custom... |
| CVE-2026-55246 | HIGH | 7.8 | 0.2% | Oct 15, 2026 | bincookie is a header-only binarycookies parser. Prior to 0.1.9, bincookie_init_file() in bincookie.h allocates a buffer... |
| CVE-2026-55103 | HIGH | 8.6 | 0.2% | Oct 15, 2026 | Discourse ActivityPub adds ActivityPub support to Discourse. Prior to commit 1c8518b0f2abdf31cbea3e0b242f74d8994a9ba5, i... |
| CVE-2026-54683 | MEDIUM | 6.5 | 0.3% | Oct 15, 2026 | NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, custom... |
| CVE-2026-111105 | HIGH | 7 | 0.1% | Oct 15, 2026 | Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e... |
| CVE-2026-110891 | MEDIUM | 5.4 | 0.2% | Oct 15, 2026 | Missing Authorization vulnerability in WordLift Srl WordLift wordlift allows Exploiting Incorrectly Configured Access Co... |
| CVE-2026-110890 | MEDIUM | 6.5 | — | Oct 15, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmar... |
| CVE-2026-110888 | MEDIUM | 4.3 | 0.2% | Oct 15, 2026 | Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Con... |
| CVE-2026-110381 | MEDIUM | 6.3 | 0.2% | Oct 15, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-... |
| CVE-2026-110371 | MEDIUM | 4.3 | — | Oct 15, 2026 | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Co... |
| CVE-2026-110367 | MEDIUM | 5.3 | — | Oct 15, 2026 | Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrect... |