CVE Vulnerability Database
Search and browse 423,895 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-57569 | LOW | 2.3 | — | Oct 15, 2026 | Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow validates a ho... |
| CVE-2026-57568 | MEDIUM | 5.7 | 0.3% | Oct 15, 2026 | Lychee is a free, open-source photo-management tool. Prior to 7.6.0, Lychee permits an authenticated user with album-edi... |
| CVE-2026-110812 | CRITICAL | 9.9 | 0.4% | Oct 15, 2026 | Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an aut... |
| CVE-2026-105065 | HIGH | 7.1 | 0.1% | Oct 15, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme.com XStore ... |
| CVE-2026-102631 | MEDIUM | 5.9 | 0.1% | Oct 15, 2026 | In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login b... |
| CVE-2026-102527 | MEDIUM | 6.9 | 0.2% | Oct 15, 2026 | Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.2.5 until 6.7.0, the dynamic /_og/d/*.png route acc... |
| CVE-2026-100409 | HIGH | 7.5 | 0.3% | Oct 15, 2026 | OpenNext Cloudflare is an open Next.js adapter for Cloudflare. From 0.3.0 until 1.20.2, applications that enable enableC... |
| CVE-2026-100354 | HIGH | 7.5 | — | Oct 15, 2026 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.149.0, runtime request, response, and direct schema v... |
| CVE-2026-100353 | HIGH | 7.5 | 0.3% | Oct 15, 2026 | kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149.0, three openapi3filter decoder paths t... |
| CVE-2026-97712 | HIGH | 8.7 | 0.3% | Oct 15, 2026 | Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privil... |
| CVE-2026-97667 | MEDIUM | 5.1 | 0.3% | Oct 15, 2026 | Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store scrip... |
| CVE-2026-97666 | MEDIUM | 6.9 | 0.6% | Oct 15, 2026 | Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java clas... |
| CVE-2026-97665 | HIGH | 7.1 | 0.3% | Oct 15, 2026 | A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only re... |
| CVE-2026-97394 | HIGH | 7.5 | 0.4% | Oct 15, 2026 | kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filter accepts OpenAPI 3.1 a... |
| CVE-2026-95155 | HIGH | 7.5 | 0.3% | Oct 15, 2026 | FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attacke... |
| CVE-2026-92982 | HIGH | 8.5 | 0.5% | Oct 15, 2026 | A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection v... |
| CVE-2026-88753 | HIGH | 7.5 | 0.1% | Oct 15, 2026 | A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib/markdown2.py) of trent... |
| CVE-2026-75505 | MEDIUM | 6 | 0.3% | Oct 15, 2026 | EspoCRM is an open source customer relationship management application. Prior to 10.0.2, an authenticated user with mass... |
| CVE-2026-71490 | HIGH | 7.1 | — | Oct 15, 2026 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11, OPNsense\Core\ACL::hasPrivilege() appends a... |
| CVE-2026-63442 | HIGH | 8.1 | 0.3% | Oct 15, 2026 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the unauthenticated WebGUI login us... |
| CVE-2026-58395 | MEDIUM | 4.3 | — | Oct 15, 2026 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the safe-delete path reached throug... |
| CVE-2026-58394 | MEDIUM | 5.2 | — | Oct 15, 2026 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, src/www/system_advanced_admin.php r... |
| CVE-2026-58393 | MEDIUM | 5.9 | — | Oct 15, 2026 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Client Specific Overrid... |
| CVE-2026-58392 | MEDIUM | 5.4 | — | Oct 15, 2026 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the NTP GPS page stores the operato... |
| CVE-2026-58391 | MEDIUM | 5.4 | 0.2% | Oct 15, 2026 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, Firewall Rules and NAT views place ... |