CVE Vulnerability Database
Search and browse 424,261 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-55823 | HIGH | 8.7 | — | Oct 13, 2026 | Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a coun... |
| CVE-2026-55562 | CRITICAL | 9 | 0.4% | Oct 13, 2026 | Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator... |
| CVE-2026-55183 | CRITICAL | 9.6 | 0.4% | Oct 13, 2026 | RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.... |
| CVE-2026-54641 | HIGH | 7.7 | — | Oct 13, 2026 | OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the get, getUserClientRoles, and getUserRealm... |
| CVE-2026-54640 | HIGH | 7.6 | 0.2% | Oct 13, 2026 | OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the KNXProtocol.startAssetImport method in ag... |
| CVE-2026-54454 | CRITICAL | 9.1 | — | Oct 13, 2026 | OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior t... |
| CVE-2026-53562 | HIGH | 8.5 | 0.2% | Oct 13, 2026 | Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects Uni... |
| CVE-2026-19940 | MEDIUM | 6.5 | 0.2% | Oct 13, 2026 | The Bluetooth Classic Hands-Free Profile Audio Gateway implementation in subsys/bluetooth/host/classic/hfp_ag.c keeps it... |
| CVE-2026-19939 | MEDIUM | 6.3 | 0.2% | Oct 13, 2026 | The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in avdtp_send_cmd() whenever the local device... |
| CVE-2026-110131 | MEDIUM | 5.3 | 0.3% | Oct 13, 2026 | ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id} ... |
| CVE-2026-110129 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundContr... |
| CVE-2026-110128 | HIGH | 7.5 | 0.4% | Oct 13, 2026 | fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to re... |
| CVE-2026-110127 | MEDIUM | 4.3 | 0.2% | Oct 13, 2026 | waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that... |
| CVE-2026-110126 | MEDIUM | 5.4 | 0.3% | Oct 13, 2026 | waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows ... |
| CVE-2026-110125 | MEDIUM | 6.3 | 0.3% | Oct 13, 2026 | Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members... |
| CVE-2026-110124 | HIGH | 8.1 | 0.3% | Oct 13, 2026 | FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authent... |
| CVE-2026-110123 | HIGH | 7.1 | 0.3% | Oct 13, 2026 | Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to ... |
| CVE-2026-110122 | MEDIUM | 4.3 | 0.2% | Oct 13, 2026 | PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated selle... |
| CVE-2026-110121 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated selle... |
| CVE-2026-110120 | MEDIUM | 5.4 | 0.2% | Oct 13, 2026 | Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the after-sales API that allows au... |
| CVE-2026-110119 | HIGH | 7.1 | 0.3% | Oct 13, 2026 | Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows... |
| CVE-2026-110118 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authenticated users to complet... |
| CVE-2026-110117 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController that allows authentic... |
| CVE-2026-110116 | CRITICAL | 9.1 | 0.6% | Oct 13, 2026 | Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager store... |
| CVE-2026-110115 | HIGH | 7.5 | 0.4% | Oct 13, 2026 | Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileCo... |