CVE Vulnerability Database
Search and browse 423,905 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110909 | MEDIUM | 5 | 0.1% | Oct 15, 2026 | Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the cu... |
| CVE-2026-110908 | HIGH | 8.8 | 6.1% | Oct 15, 2026 | Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulner... |
| CVE-2026-110907 | HIGH | 7.5 | 0.2% | Oct 15, 2026 | Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string... |
| CVE-2026-77931 | HIGH | 8.8 | 1.0% | Oct 15, 2026 | MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS comman... |
| CVE-2026-76661 | HIGH | 7.6 | 0.2% | Oct 15, 2026 | A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data. |
| CVE-2026-76660 | HIGH | 8.7 | 0.1% | Oct 15, 2026 | A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data. |
| CVE-2026-76659 | HIGH | 7.5 | 0.3% | Oct 15, 2026 | A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to c... |
| CVE-2026-76656 | MEDIUM | 5.3 | 0.2% | Oct 15, 2026 | A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of ... |
| CVE-2026-76066 | HIGH | 7.5 | 0.4% | Oct 15, 2026 | IntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnerability where the executor vali... |
| CVE-2026-73799 | HIGH | 7.5 | 0.3% | Oct 15, 2026 | A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption |
| CVE-2026-110904 | MEDIUM | 5.3 | 0.2% | Oct 15, 2026 | ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostr... |
| CVE-2026-109430 | HIGH | 7.5 | 0.3% | Oct 15, 2026 | Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote... |
| CVE-2026-110810 | LOW | 2.8 | 0.1% | Oct 15, 2026 | A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the fi... |
| CVE-2026-0993 | HIGH | 7.5 | 0.4% | Oct 15, 2026 | SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated re... |
| CVE-2026-110809 | MEDIUM | 4.3 | 0.3% | Oct 15, 2026 | A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Se... |
| CVE-2026-110873 | HIGH | 7.1 | 0.2% | Oct 14, 2026 | Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared collaborators to overwr... |
| CVE-2026-110872 | MEDIUM | 5.9 | 0.3% | Oct 14, 2026 | Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client ... |
| CVE-2026-110871 | MEDIUM | 6.5 | 0.3% | Oct 14, 2026 | Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allow... |
| CVE-2026-110870 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its address parser that fail... |
| CVE-2026-110869 | HIGH | 7.5 | 0.3% | Oct 14, 2026 | Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._actionEHLO, whose four AUT... |
| CVE-2026-110868 | HIGH | 8.5 | 0.2% | Oct 14, 2026 | Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP c... |
| CVE-2026-110867 | HIGH | 8.5 | 0.3% | Oct 14, 2026 | Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set restricted environmen... |
| CVE-2026-110866 | MEDIUM | 4.7 | 0.2% | Oct 14, 2026 | Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be ... |
| CVE-2026-110865 | HIGH | 7.1 | 0.2% | Oct 14, 2026 | Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users to evade the allowedHead... |
| CVE-2026-110864 | HIGH | 7.4 | 0.3% | Oct 14, 2026 | Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin th... |