CVE Vulnerability Database
Search and browse 424,056 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-107369 | MEDIUM | 6.1 | 0.2% | Oct 13, 2026 | The auth0/nextjs-auth0 SDK validates that the returnTo parameter is a same-origin URL. The SDK then stores this value an... |
| CVE-2026-106624 | CRITICAL | 10 | 1.1% | Oct 13, 2026 | ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result i... |
| CVE-2026-106623 | HIGH | 7.5 | 0.5% | Oct 13, 2026 | ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory. An... |
| CVE-2026-106622 | CRITICAL | 10 | 0.7% | Oct 13, 2026 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. ... |
| CVE-2026-106621 | CRITICAL | 9.1 | 0.7% | Oct 13, 2026 | ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result i... |
| CVE-2026-106620 | CRITICAL | 9.6 | 0.3% | Oct 13, 2026 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low... |
| CVE-2026-106619 | CRITICAL | 9 | 0.6% | Oct 13, 2026 | ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in th... |
| CVE-2026-106618 | HIGH | 8.8 | 0.2% | Oct 13, 2026 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the ... |
| CVE-2026-106617 | HIGH | 8.8 | 0.1% | Oct 13, 2026 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the ... |
| CVE-2026-106616 | HIGH | 8.6 | 0.5% | Oct 13, 2026 | ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead... |
| CVE-2026-106615 | HIGH | 8.8 | 0.1% | Oct 13, 2026 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the ... |
| CVE-2026-106614 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the ... |
| CVE-2026-106613 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in th... |
| CVE-2026-106612 | CRITICAL | 9.9 | 0.4% | Oct 13, 2026 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the ... |
| CVE-2026-106090 | HIGH | 8.8 | 0.1% | Oct 13, 2026 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the ... |
| CVE-2026-106089 | HIGH | 8.8 | 0.2% | Oct 13, 2026 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the ... |
| CVE-2026-105994 | HIGH | 7.7 | 0.4% | Oct 13, 2026 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low... |
| CVE-2026-105903 | CRITICAL | 9.9 | 0.5% | Oct 13, 2026 | ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result i... |
| CVE-2026-105901 | HIGH | 8.8 | 0.1% | Oct 13, 2026 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the ... |
| CVE-2026-105900 | HIGH | 7.5 | 0.5% | Oct 13, 2026 | ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-servi... |
| CVE-2026-105899 | CRITICAL | 10 | 0.6% | Oct 13, 2026 | ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrar... |
| CVE-2026-105898 | HIGH | 8.2 | 0.1% | Oct 13, 2026 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the ... |
| CVE-2026-105897 | HIGH | 8.6 | 0.5% | Oct 13, 2026 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. ... |
| CVE-2026-105896 | MEDIUM | 5.5 | 0.1% | Oct 13, 2026 | Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-... |
| CVE-2026-105443 | HIGH | 8.2 | 0.2% | Oct 13, 2026 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing... |