CVE Vulnerability Database
Search and browse 423,945 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110630 | MEDIUM | 6.5 | 0.6% | Oct 14, 2026 | VentureDrake Laravel CRM before 2.4.0 contains an incorrect authorization vulnerability in user management that allows a... |
| CVE-2026-110629 | MEDIUM | 6.5 | 0.6% | Oct 14, 2026 | VentureDrake Laravel CRM before 2.4.0 contains a missing authorization vulnerability that allows authenticated users to ... |
| CVE-2026-110628 | HIGH | 8.6 | 0.4% | Oct 14, 2026 | Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attat... |
| CVE-2026-110627 | MEDIUM | 4.7 | — | Oct 14, 2026 | ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/index.php that al... |
| CVE-2026-110626 | MEDIUM | 6.1 | 0.4% | Oct 14, 2026 | ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/language_settings... |
| CVE-2026-110625 | MEDIUM | 6.1 | — | Oct 14, 2026 | ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/flagged_item.php ... |
| CVE-2026-110624 | LOW | 3.1 | — | Oct 14, 2026 | Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to list oth... |
| CVE-2026-110623 | HIGH | 7.5 | 0.5% | Oct 14, 2026 | Papermerge Core through 3.5.3 contains a missing authorization vulnerability in the shared nodes API that allows authent... |
| CVE-2026-110622 | HIGH | 7.5 | — | Oct 14, 2026 | Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to manipula... |
| CVE-2026-110621 | HIGH | 8.8 | 0.5% | Oct 14, 2026 | Swetrix Cloud before 5.1.0 contains a missing authorization vulnerability in ProjectController.addProject that allows au... |
| CVE-2026-110620 | MEDIUM | 6.8 | 0.6% | Oct 14, 2026 | Formbricks before 4.9.0 contains an authorization bypass vulnerability in server actions like resetSurveyAction and upda... |
| CVE-2026-110619 | MEDIUM | 4.8 | — | Oct 14, 2026 | frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticated remote attackers t... |
| CVE-2026-110618 | HIGH | 8.1 | 0.4% | Oct 14, 2026 | SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unau... |
| CVE-2026-110617 | MEDIUM | 4.8 | 0.6% | Oct 14, 2026 | we-mp-rss through 1.5.3 contains a missing authorization vulnerability in the /api/v1/wx/tools/export/download endpoint ... |
| CVE-2026-110616 | HIGH | 8.1 | 0.8% | Oct 14, 2026 | NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated attackers to acces... |
| CVE-2026-110615 | HIGH | 7.1 | 0.4% | Oct 14, 2026 | jshERP through 3.6 contains a missing authorization vulnerability in the POST /user/batchSetStatus endpoint that allows ... |
| CVE-2026-110614 | MEDIUM | 6.5 | 0.5% | Oct 14, 2026 | Yiuman citrus through 0.15.0 contains an ORDER BY sql injection vulnerability in the citrus-support generic query framew... |
| CVE-2026-110613 | MEDIUM | 6.5 | 0.4% | Oct 14, 2026 | youlai-mall through commit 9f62de8 contains a missing authorization vulnerability that allows authenticated members to v... |
| CVE-2026-110612 | CRITICAL | 9.8 | 1.0% | Oct 14, 2026 | vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs ... |
| CVE-2026-110611 | MEDIUM | 5.9 | 0.3% | Oct 14, 2026 | REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 endpoints that act on a... |
| CVE-2026-110610 | MEDIUM | 5.4 | 0.3% | Oct 14, 2026 | ruoyi-vue-pro through 2026.09 contains a server-side request forgery vulnerability in the yudao-module-ai image service ... |
| CVE-2026-110609 | MEDIUM | 6.5 | 0.5% | Oct 14, 2026 | Dromara Skyeye through commit 65d3ddcede70 contains an sql injection vulnerability that allows authenticated low-privile... |
| CVE-2026-110608 | MEDIUM | 5.4 | 0.4% | Oct 14, 2026 | BizSpring Shop through commit cf22d39daaf1 contains an insecure direct object reference vulnerability in the OrderContro... |
| CVE-2026-110607 | MEDIUM | 6.5 | 0.3% | Oct 14, 2026 | BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticate... |
| CVE-2026-110606 | LOW | 3.3 | 0.2% | Oct 14, 2026 | LibreCAD libdxfrw through LC2.2.0 (LibreCAD through 2.2.1.5) contains a stack-based out-of-bounds read vulnerability in ... |