CVE Vulnerability Database
Search and browse 423,922 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-55572 | CRITICAL | 10 | 0.5% | Oct 14, 2026 | e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and e107db authenticati... |
| CVE-2026-54554 | HIGH | 7.5 | 0.5% | Oct 14, 2026 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1870, the management... |
| CVE-2026-42093 | HIGH | 8.7 | 0.7% | Oct 14, 2026 | Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query ... |
| CVE-2026-110777 | MEDIUM | 5.7 | 0.4% | Oct 14, 2026 | A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatical... |
| CVE-2026-109527 | HIGH | 7.5 | 0.7% | Oct 14, 2026 | The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. In mcp ... |
| CVE-2026-108484 | HIGH | 7.1 | 0.2% | Oct 14, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Best... |
| CVE-2026-108483 | HIGH | 7.1 | 0.2% | Oct 14, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hippooo Hippoo Mob... |
| CVE-2026-108480 | HIGH | 8.2 | 0.3% | Oct 14, 2026 | Missing Authorization vulnerability in Skydropx Skydropx skydropx allows Exploiting Incorrectly Configured Access Contro... |
| CVE-2026-108395 | HIGH | 7.5 | 0.6% | Oct 14, 2026 | The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. From versio... |
| CVE-2026-108390 | CRITICAL | 9.9 | 0.7% | Oct 14, 2026 | Hestia Control Panel is a lightweight and powerful control panel for the modern web. From version 1.9.7 through 1.10.4, ... |
| CVE-2026-108151 | MEDIUM | 5.3 | 0.3% | Oct 14, 2026 | Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-tax... |
| CVE-2026-107350 | HIGH | 8.8 | 0.4% | Oct 14, 2026 | Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user lis... |
| CVE-2026-107349 | HIGH | 7.5 | 0.4% | Oct 14, 2026 | An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of servi... |
| CVE-2026-107348 | MEDIUM | 5.9 | 0.4% | Oct 14, 2026 | Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a remote ... |
| CVE-2026-106465 | MEDIUM | 6.9 | 0.3% | Oct 14, 2026 | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603, the NetX Secure DTLS server never compares the cookie a c... |
| CVE-2026-106464 | HIGH | 8.7 | 0.2% | Oct 14, 2026 | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, the NetX Secure X.509 parser accepts a certificat... |
| CVE-2026-105066 | HIGH | 7.1 | 0.3% | Oct 14, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SimplyRETS SimplyR... |
| CVE-2026-104103 | HIGH | 8.1 | 0.5% | Oct 14, 2026 | Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models. Prior to 0.17.8, ludwig.d... |
| CVE-2026-103975 | MEDIUM | 6.5 | 0.6% | Oct 14, 2026 | Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior... |
| CVE-2026-103415 | CRITICAL | 9.3 | 0.3% | Oct 14, 2026 | When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without c... |
| CVE-2026-103414 | HIGH | 8.4 | 0.2% | Oct 14, 2026 | The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resour... |
| CVE-2026-103081 | HIGH | 7.5 | 0.3% | Oct 14, 2026 | Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Salevo woo-boost-sales allows Code... |
| CVE-2026-102476 | CRITICAL | 9.1 | 0.2% | Oct 14, 2026 | In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL co... |
| CVE-2026-102077 | HIGH | 7.5 | 0.3% | Oct 14, 2026 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N... |
| CVE-2026-101983 | CRITICAL | 9.8 | 0.5% | Oct 14, 2026 | A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allow... |