CVE Vulnerability Database
Search and browse 423,895 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-106150 | MEDIUM | 5.4 | — | Oct 15, 2026 | In Progress® Kendo® UI for jQuery prior to 2026.3.1015, the Splitter and Window components starting with version 2011.2.... |
| CVE-2026-106149 | MEDIUM | 5.4 | 0.2% | Oct 15, 2026 | In Progress® Kendo® UI for jQuery prior to v2026.3.1015, the Menu component constructs HTML attributes from bound dataSo... |
| CVE-2026-104586 | CRITICAL | 9.8 | 0.8% | Oct 15, 2026 | AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi. |
| CVE-2026-103509 | HIGH | 8.5 | 0.2% | Oct 15, 2026 | P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with ad... |
| CVE-2026-103508 | HIGH | 7.3 | 0.4% | Oct 15, 2026 | P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Ser... |
| CVE-2026-93649 | HIGH | 7.5 | 0.1% | Oct 15, 2026 | In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix... |
| CVE-2026-110927 | — | — | 0.3% | Oct 15, 2026 | Rejected reason: CVE-2026-110927 has been marked as a duplicate of CVE-2026-106585. |
| CVE-2026-110924 | — | — | 0.2% | Oct 15, 2026 | Rejected reason: CVE-2026-110924 has been marked as a duplicate of CVE-2026-106553. |
| CVE-2026-106163 | MEDIUM | 6.5 | 0.2% | Oct 15, 2026 | In Progress® Kendo® UI for jQuery versions starting with v2023.1.117 and prior to v2026.3.1015, the FileBrowser and Imag... |
| CVE-2026-106162 | MEDIUM | 4.7 | 0.1% | Oct 15, 2026 | In Progress® Kendo® UI for jQuery versions starting with 2023.3.1010 and prior to 2026.3.1015, the FileManager component... |
| CVE-2026-106161 | MEDIUM | 5.4 | 0.2% | Oct 15, 2026 | In Progress® Kendo® UI for jQuery releases starting with v2020.1.114 and prior to 2026.3.1015, the Badge text method ren... |
| CVE-2026-106160 | MEDIUM | 5.4 | 0.2% | Oct 15, 2026 | In Progress® Kendo® UI for jQuery prior to 2026.3.1015, Model.accept passes server-response keys to kendo.setter without... |
| CVE-2026-106159 | MEDIUM | 4.7 | 0.2% | Oct 15, 2026 | In Progress® Kendo® UI for jQuery versions starting with 2022.3.1109 and prior to 2026.3.1015, ToolBar ButtonGroup butto... |
| CVE-2026-106158 | MEDIUM | 4.7 | 0.2% | Oct 15, 2026 | In Progress® Kendo® UI for jQuery, in v2026.3.811 and earlier, the Scheduler Day, Timeline, Month, and Agenda views inse... |
| CVE-2026-106157 | MEDIUM | 4.7 | 0.2% | Oct 15, 2026 | In Progress® Kendo® UI for jQuery versions starting with 2019.2.514 and prior to 2026.3.1015, the PanelBar component ins... |
| CVE-2026-106148 | MEDIUM | 5.4 | 0.2% | Oct 15, 2026 | In Progress® Kendo® UI for jQuery prior to 2026.3.1015, the TabStrip, Menu, and PanelBar components insert data source i... |
| CVE-2026-106147 | MEDIUM | 5.4 | 0.2% | Oct 15, 2026 | In Progress® Kendo® UI for jQuery releases starting with R1 2020 and prior to 2026.3.1015, the ListBox default item temp... |
| CVE-2026-104024 | MEDIUM | 4.6 | 0.1% | Oct 15, 2026 | Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (pea... |
| CVE-2026-99999 | CRITICAL | 9.3 | 0.2% | Oct 15, 2026 | In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing che... |
| CVE-2026-98432 | CRITICAL | 9.8 | 0.8% | Oct 15, 2026 | In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace... |
| CVE-2026-88794 | HIGH | 8.2 | 0.3% | Oct 15, 2026 | Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature. When a user load... |
| CVE-2026-79837 | HIGH | 7.3 | — | Oct 15, 2026 | A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disru... |
| CVE-2026-110724 | HIGH | 7.5 | 0.2% | Oct 15, 2026 | In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-clie... |
| CVE-2026-110723 | HIGH | 7.5 | — | Oct 15, 2026 | In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-clie... |
| CVE-2026-109892 | CRITICAL | 9.8 | — | Oct 15, 2026 | Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element all... |