CVE Vulnerability Database
Search and browse 424,279 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110105 | MEDIUM | 5.3 | 0.3% | Oct 13, 2026 | B3log Symphony through 3.6.4 contains a missing authorization vulnerability that allows unauthenticated attackers to rea... |
| CVE-2026-110104 | MEDIUM | 5.9 | 0.3% | Oct 13, 2026 | Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to recover plaintext pa... |
| CVE-2026-110103 | MEDIUM | 5.4 | 0.2% | Oct 13, 2026 | bbs-go through 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML... |
| CVE-2026-110102 | HIGH | 7.5 | 0.1% | Oct 13, 2026 | Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables T... |
| CVE-2026-110101 | MEDIUM | 5.4 | 0.2% | Oct 13, 2026 | Koillection through 1.8.4 contains a stored cross-site scripting vulnerability that allows authenticated users to upload... |
| CVE-2026-110100 | MEDIUM | 5.4 | 0.2% | Oct 13, 2026 | Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import() that allows any authenticated ... |
| CVE-2026-110099 | MEDIUM | 4.3 | 0.3% | Oct 13, 2026 | Jorani before 1.0.4 contains a missing authorization vulnerability in the Hr controller's exportLeaves, exportOvertime a... |
| CVE-2026-110098 | MEDIUM | 5.4 | 0.2% | Oct 13, 2026 | Jorani before 1.0.4 contains an insecure direct object reference vulnerability that allows authenticated users to modify... |
| CVE-2026-110097 | HIGH | 8.1 | 0.4% | Oct 13, 2026 | Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerability that allows attackers with a valid password t... |
| CVE-2026-10759 | MEDIUM | 5.5 | 0.2% | Oct 13, 2026 | A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Direc... |
| CVE-2026-109898 | MEDIUM | 5.3 | 0.2% | Oct 13, 2026 | Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Confi... |
| CVE-2026-109896 | MEDIUM | 4.3 | 0.2% | Oct 13, 2026 | Missing Authorization vulnerability in WP Chill Download Monitor integration for WooCommerce download-monitor-integratio... |
| CVE-2026-109890 | MEDIUM | 5.3 | 0.2% | Oct 13, 2026 | Missing Authorization vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Exploit... |
| CVE-2026-109828 | MEDIUM | 4.3 | — | Oct 13, 2026 | A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file ... |
| CVE-2026-109827 | MEDIUM | 6.3 | 0.3% | Oct 13, 2026 | A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf_m2ts_decode_ait of the ... |
| CVE-2026-109620 | HIGH | 7.3 | 0.4% | Oct 13, 2026 | A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the funct... |
| CVE-2026-109607 | HIGH | 7.3 | 0.4% | Oct 13, 2026 | A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/a... |
| CVE-2026-109606 | HIGH | 7.3 | — | Oct 13, 2026 | A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save... |
| CVE-2026-109412 | CRITICAL | 9.9 | 0.9% | Oct 13, 2026 | An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitiv... |
| CVE-2026-106047 | HIGH | 7.7 | 0.7% | Oct 13, 2026 | A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a r... |
| CVE-2026-106043 | HIGH | 7.5 | 0.7% | Oct 13, 2026 | A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote u... |
| CVE-2026-106042 | CRITICAL | 9.9 | 0.8% | Oct 13, 2026 | An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authent... |
| CVE-2026-106035 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a re... |
| CVE-2026-106034 | MEDIUM | 5 | 0.5% | Oct 13, 2026 | A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to creat... |
| CVE-2026-104250 | MEDIUM | 6.1 | 0.2% | Oct 13, 2026 | The unstructured library provides open-source components for ingesting and pre-processing images and text documents, suc... |