CVE Vulnerability Database

Search and browse 423,915 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-55681HIGH8.8WeGIA is a web manager for charitable institutions. Prior to 3.8.6, an authenticated user with access to the Material & ...
CVE-2026-55680CRITICAL9.8WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sist...
CVE-2026-55679MEDIUM6.5WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the pre-installation web/instalador/instalador.php e...
CVE-2026-55498MEDIUM4.8FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.15.0,...
CVE-2026-55387HIGH7.2InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and...
CVE-2026-55386HIGH7.1InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and...
CVE-2026-55385MEDIUM6.8InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and...
CVE-2026-55384MEDIUM5.3InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and...
CVE-2026-55383HIGH8.2InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and...
CVE-2026-55382HIGH7.6InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and...
CVE-2026-55381HIGH7.1InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and...
CVE-2026-54703MEDIUM5.8Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the _crossnote.update...
CVE-2026-54702HIGH7.3Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message h...
CVE-2026-54701MEDIUM6.9Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, Markdown Preview Enha...
CVE-2026-54566HIGH8.5Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.29, Markdown Preview Enha...
CVE-2026-110669MEDIUM6.5A security vulnerability has been detected in cemtan sar2html 4.0.0. This affects the function deleteHost/deleteRange/de...
CVE-2026-110668HIGH7.3A weakness has been identified in cemtan sar2html 4.0.0. Affected by this issue is the function index of the file sar2ht...
CVE-2026-110310MEDIUM5.3A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding sche...
CVE-2026-102986HIGH8.1Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the public project asset e...
CVE-2026-102985MEDIUM6.5Plane is an open-source project management tool. In 1.3.1 and earlier, ProjectMemberViewSet.partial_update places its au...
CVE-2026-102980MEDIUM6.5Plane is an open-source project management tool. Prior to 1.4.0, PageVersionEndpoint in apps/api/plane/app/views/page/ve...
CVE-2026-0321MEDIUM6.6Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network ...
CVE-2026-85714CRITICAL9.1Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.13.2, an a...
CVE-2026-82402MEDIUM5.3Gogs is an open source self-hosted Git service. Prior to 0.15.0+dev, an unauthenticated attacker can provide a backslash...
CVE-2026-82153LOW2.2Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A l...