CVE Vulnerability Database
Search and browse 424,261 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110114 | MEDIUM | 6.5 | 0.4% | Oct 13, 2026 | FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to dele... |
| CVE-2026-110113 | MEDIUM | 4.3 | 0.2% | Oct 13, 2026 | PublicCMS through V6.202608.a contains an insecure direct object reference vulnerability in the TradeAddressController t... |
| CVE-2026-110110 | MEDIUM | 4.3 | 0.2% | Oct 13, 2026 | JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query acces... |
| CVE-2026-110109 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query acces... |
| CVE-2026-110108 | HIGH | 8.1 | 0.3% | Oct 13, 2026 | MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage obje... |
| CVE-2026-110107 | MEDIUM | 4.2 | 0.3% | Oct 13, 2026 | RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated user... |
| CVE-2026-110106 | MEDIUM | 4.2 | 0.3% | Oct 13, 2026 | RuoYi-Vue-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users ... |
| CVE-2026-110105 | MEDIUM | 5.3 | 0.3% | Oct 13, 2026 | B3log Symphony through 3.6.4 contains a missing authorization vulnerability that allows unauthenticated attackers to rea... |
| CVE-2026-110104 | MEDIUM | 5.9 | 0.3% | Oct 13, 2026 | Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to recover plaintext pa... |
| CVE-2026-110103 | MEDIUM | 5.4 | 0.2% | Oct 13, 2026 | bbs-go through 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML... |
| CVE-2026-110102 | HIGH | 7.5 | 0.1% | Oct 13, 2026 | Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables T... |
| CVE-2026-110101 | MEDIUM | 5.4 | 0.2% | Oct 13, 2026 | Koillection through 1.8.4 contains a stored cross-site scripting vulnerability that allows authenticated users to upload... |
| CVE-2026-110100 | MEDIUM | 5.4 | 0.2% | Oct 13, 2026 | Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import() that allows any authenticated ... |
| CVE-2026-110099 | MEDIUM | 4.3 | 0.3% | Oct 13, 2026 | Jorani before 1.0.4 contains a missing authorization vulnerability in the Hr controller's exportLeaves, exportOvertime a... |
| CVE-2026-110098 | MEDIUM | 5.4 | 0.2% | Oct 13, 2026 | Jorani before 1.0.4 contains an insecure direct object reference vulnerability that allows authenticated users to modify... |
| CVE-2026-110097 | HIGH | 8.1 | 0.4% | Oct 13, 2026 | Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerability that allows attackers with a valid password t... |
| CVE-2026-10759 | MEDIUM | 5.5 | 0.2% | Oct 13, 2026 | A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Direc... |
| CVE-2026-109898 | MEDIUM | 5.3 | 0.2% | Oct 13, 2026 | Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Confi... |
| CVE-2026-109896 | MEDIUM | 4.3 | 0.2% | Oct 13, 2026 | Missing Authorization vulnerability in WP Chill Download Monitor integration for WooCommerce download-monitor-integratio... |
| CVE-2026-109890 | MEDIUM | 5.3 | 0.2% | Oct 13, 2026 | Missing Authorization vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Exploit... |
| CVE-2026-109828 | MEDIUM | 4.3 | — | Oct 13, 2026 | A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file ... |
| CVE-2026-109827 | MEDIUM | 6.3 | 0.3% | Oct 13, 2026 | A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf_m2ts_decode_ait of the ... |
| CVE-2026-109620 | HIGH | 7.3 | 0.4% | Oct 13, 2026 | A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the funct... |
| CVE-2026-109607 | HIGH | 7.3 | 0.4% | Oct 13, 2026 | A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/a... |
| CVE-2026-109606 | HIGH | 7.3 | — | Oct 13, 2026 | A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save... |