CVE Vulnerability Database
Search and browse 424,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-59116 | MEDIUM | 6.8 | 0.4% | Oct 13, 2026 | Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a s... |
| CVE-2026-58280 | HIGH | 7.5 | 1.1% | Oct 13, 2026 | Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-54086 | MEDIUM | 5.3 | 0.5% | Oct 13, 2026 | SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path... |
| CVE-2026-49785 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally... |
| CVE-2026-110256 | LOW | 3.7 | 0.3% | Oct 13, 2026 | Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function in src/lib/server/au... |
| CVE-2026-110255 | HIGH | 8.5 | — | Oct 13, 2026 | Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerability that allows authe... |
| CVE-2026-110254 | MEDIUM | 4.3 | 0.3% | Oct 13, 2026 | Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory() function in src/l... |
| CVE-2026-110249 | HIGH | 8.6 | 0.2% | Oct 13, 2026 | A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an... |
| CVE-2026-110247 | HIGH | 8.4 | 0.2% | Oct 13, 2026 | Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficien... |
| CVE-2026-110240 | MEDIUM | 4.8 | — | Oct 13, 2026 | Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 pr... |
| CVE-2026-110239 | MEDIUM | 4.4 | 0.2% | Oct 13, 2026 | Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component t... |
| CVE-2026-110238 | HIGH | 8.8 | 0.5% | Oct 13, 2026 | Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows authenticated company me... |
| CVE-2026-110237 | HIGH | 7.3 | 0.1% | Oct 13, 2026 | Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownersh... |
| CVE-2026-110236 | HIGH | 7 | 1.0% | Oct 13, 2026 | KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute comm... |
| CVE-2026-110235 | MEDIUM | 5.5 | — | Oct 13, 2026 | MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extrac... |
| CVE-2026-110234 | MEDIUM | 4.4 | 0.1% | Oct 13, 2026 | Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user'... |
| CVE-2026-110233 | HIGH | 7.8 | 1.1% | Oct 13, 2026 | Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands ... |
| CVE-2026-110232 | LOW | 3.3 | 0.2% | Oct 13, 2026 | Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write fil... |
| CVE-2026-110231 | MEDIUM | 4.7 | 0.2% | Oct 13, 2026 | muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outs... |
| CVE-2026-110230 | MEDIUM | 5.4 | — | Oct 13, 2026 | XBackBone through 3.8.2 contains a missing authorization vulnerability that allows authenticated users to change other u... |
| CVE-2026-110229 | MEDIUM | 5.4 | 0.3% | Oct 13, 2026 | QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that allows hotel-restric... |
| CVE-2026-110228 | MEDIUM | 5.4 | 0.2% | Oct 13, 2026 | wallabag 2.6.13 through 2.6.14 contains a stored cross-site scripting vulnerability that allows authenticated users to h... |
| CVE-2026-110226 | MEDIUM | 5.4 | 0.3% | Oct 13, 2026 | QloApps through 1.7.0 contains a broken access control vulnerability that allows hotel-restricted back-office employees ... |
| CVE-2026-110225 | LOW | 2.7 | 0.3% | Oct 13, 2026 | Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the ... |
| CVE-2026-110224 | MEDIUM | 5.4 | — | Oct 13, 2026 | QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfController::processSave(... |