CVE Vulnerability Database
Search and browse 423,902 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-16438 | CRITICAL | 9.4 | 0.3% | Oct 15, 2026 | Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite ... |
| CVE-2026-16437 | HIGH | 7.1 | 0.1% | Oct 15, 2026 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and ... |
| CVE-2026-16436 | CRITICAL | 9.2 | 0.3% | Oct 15, 2026 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and ... |
| CVE-2026-109855 | HIGH | 7.5 | 0.3% | Oct 15, 2026 | undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is... |
| CVE-2026-105271 | MEDIUM | 5.1 | 0.1% | Oct 15, 2026 | "ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow a... |
| CVE-2026-104618 | MEDIUM | 6.2 | 0.1% | Oct 15, 2026 | On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is create... |
| CVE-2026-104617 | MEDIUM | 5.1 | 0.1% | Oct 15, 2026 | There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin ... |
| CVE-2026-103224 | MEDIUM | 5.9 | 0.3% | Oct 15, 2026 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decod... |
| CVE-2026-103223 | MEDIUM | 5.9 | 0.3% | Oct 15, 2026 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message ... |
| CVE-2026-102477 | MEDIUM | 5.9 | 0.3% | Oct 15, 2026 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does ha... |
| CVE-2026-102469 | MEDIUM | 5.9 | 0.4% | Oct 15, 2026 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (... |
| CVE-2026-102466 | MEDIUM | 5.9 | 0.3% | Oct 15, 2026 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client... |
| CVE-2026-102464 | MEDIUM | 5.9 | 0.3% | Oct 15, 2026 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT... |
| CVE-2026-102463 | MEDIUM | 5.9 | 0.3% | Oct 15, 2026 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decode... |
| CVE-2026-102462 | MEDIUM | 5.9 | 0.3% | Oct 15, 2026 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder... |
| CVE-2026-102461 | MEDIUM | 5.9 | 0.4% | Oct 15, 2026 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword... |
| CVE-2026-101290 | HIGH | 7.5 | 0.5% | Oct 15, 2026 | A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-... |
| CVE-2026-101287 | CRITICAL | 9.3 | 0.4% | Oct 15, 2026 | Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” w... |
| CVE-2025-23390 | MEDIUM | 6.3 | 0.2% | Oct 15, 2026 | A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s cer... |
| CVE-2024-22031 | HIGH | 8.5 | 0.4% | Oct 15, 2026 | A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain clust... |
| CVE-2023-32198 | HIGH | 8 | 0.3% | Oct 15, 2026 | A vulnerability has been identified in Steve where by default it was using an insecure option that did not validate the ... |
| CVE-2026-108092 | MEDIUM | 4.3 | 0.3% | Oct 15, 2026 | The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Refere... |
| CVE-2026-102475 | MEDIUM | 5.9 | 0.3% | Oct 15, 2026 | In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer... |
| CVE-2026-102467 | MEDIUM | 5.9 | 0.3% | Oct 15, 2026 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the WebSocket implement... |
| CVE-2026-102465 | MEDIUM | 5.9 | 0.2% | Oct 15, 2026 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client... |