CVE Vulnerability Database
Search and browse 424,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110223 | LOW | 3.1 | 0.3% | Oct 13, 2026 | Kavita 0.9.0 through 0.9.1.4 contains a server-side request forgery vulnerability that allows authenticated users to byp... |
| CVE-2026-110222 | MEDIUM | 5.3 | 0.3% | Oct 13, 2026 | Razorpay IFSC Ruby gem through 2.0.62 contains a server-side request forgery vulnerability that allows attackers to redi... |
| CVE-2026-110221 | MEDIUM | 5.4 | 0.2% | Oct 13, 2026 | QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the AdminHotelFeaturePricesSettings for... |
| CVE-2026-110220 | HIGH | 7.1 | 0.3% | Oct 13, 2026 | Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users ... |
| CVE-2026-110219 | MEDIUM | 5.4 | — | Oct 13, 2026 | QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject scr... |
| CVE-2026-110218 | LOW | 3.7 | 0.4% | Oct 13, 2026 | Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read un... |
| CVE-2026-110217 | MEDIUM | 6.5 | 0.5% | Oct 13, 2026 | Lenve vhr through commit 03abbd3 contains an information disclosure vulnerability that allows any authenticated user to ... |
| CVE-2026-110216 | HIGH | 7.1 | 0.4% | Oct 13, 2026 | youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows any authenticated user to enable o... |
| CVE-2026-110215 | HIGH | 8.8 | 0.4% | Oct 13, 2026 | youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows authenticated users to assign arbi... |
| CVE-2026-110214 | LOW | 3.7 | — | Oct 13, 2026 | Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to forge download signatu... |
| CVE-2026-110213 | MEDIUM | 4.3 | 0.3% | Oct 13, 2026 | Stonewuu ai-fusion-video through 1.2.0 contains an insecure direct object reference vulnerability that allows authentica... |
| CVE-2026-110212 | MEDIUM | 4.3 | 0.4% | Oct 13, 2026 | Stonewuu ai-fusion-video through 1.2.0 contains a path traversal vulnerability that allows authenticated users to write ... |
| CVE-2026-110211 | HIGH | 8.1 | 0.4% | Oct 13, 2026 | iFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authenticated user to per... |
| CVE-2026-110210 | MEDIUM | 5.3 | 0.4% | Oct 13, 2026 | Phase Console through 2.77.3 contains a missing authorization vulnerability that allows organisation members without Sec... |
| CVE-2026-110209 | MEDIUM | 6.5 | — | Oct 13, 2026 | Stonewuu ai-fusion-video through 1.2.0 contains a missing authorization vulnerability that allows authenticated non-admi... |
| CVE-2026-110208 | HIGH | 7.1 | 0.4% | Oct 13, 2026 | Wukong AICRM through 20260610 contains a missing authorization vulnerability in the /systemConfig controller that allows... |
| CVE-2026-110207 | HIGH | 8.8 | 0.4% | Oct 13, 2026 | Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows any authenticated user to call ... |
| CVE-2026-110206 | HIGH | 8.8 | 0.5% | Oct 13, 2026 | Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that allows attackers to ... |
| CVE-2026-110205 | HIGH | 8.8 | 0.5% | Oct 13, 2026 | Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that discards command sub... |
| CVE-2026-110204 | HIGH | 8.8 | 0.5% | Oct 13, 2026 | Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell comma... |
| CVE-2026-110203 | HIGH | 8.8 | 0.4% | Oct 13, 2026 | Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied sh... |
| CVE-2026-110202 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision() that allows attackers t... |
| CVE-2026-110130 | CRITICAL | 10 | 0.6% | Oct 13, 2026 | Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path... |
| CVE-2026-110112 | HIGH | 8.1 | 0.4% | Oct 13, 2026 | Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin... |
| CVE-2026-110111 | HIGH | 7.5 | 0.6% | Oct 13, 2026 | Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to becom... |