CVE Vulnerability Database
Search and browse 424,279 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-104126 | MEDIUM | 6 | 0.4% | Oct 13, 2026 | JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts, ... |
| CVE-2026-103030 | HIGH | 7.5 | 0.4% | Oct 13, 2026 | Dio is a powerful HTTP client for Dart and Flutter. From 1.0.0 until 2.8.0, dio_http2_adapter follows redirects in Http2... |
| CVE-2026-102989 | CRITICAL | 9.3 | 0.5% | Oct 13, 2026 | TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.1... |
| CVE-2026-96299 | MEDIUM | 6.5 | 0.2% | Oct 13, 2026 | A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrit... |
| CVE-2026-96297 | MEDIUM | 6.5 | 0.2% | Oct 13, 2026 | Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area af... |
| CVE-2026-88836 | — | — | — | Oct 13, 2026 | Rejected reason: Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is inten... |
| CVE-2026-81507 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Prior to 5.2.8, 5.3.6, 5.5.5, 6.0.3, and 6.1-rc... |
| CVE-2026-79611 | MEDIUM | 5.5 | 0.2% | Oct 13, 2026 | For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB... |
| CVE-2026-79610 | HIGH | 8.8 | 0.2% | Oct 13, 2026 | XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations. Sadly a v2 -> ... |
| CVE-2026-79609 | HIGH | 8.8 | 0.2% | Oct 13, 2026 | XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (CVE-2017-5754, one aspect of XSA-254). This involv... |
| CVE-2026-79608 | CRITICAL | 9.8 | 0.2% | Oct 13, 2026 | The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations o... |
| CVE-2026-79607 | MEDIUM | 5.5 | 0.2% | Oct 13, 2026 | During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes m... |
| CVE-2026-78802 | CRITICAL | 9.8 | 0.5% | Oct 13, 2026 | An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker... |
| CVE-2026-69150 | MEDIUM | 4.3 | 0.2% | Oct 13, 2026 | KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-bet... |
| CVE-2026-55695 | CRITICAL | 9.1 | 0.5% | Oct 13, 2026 | FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an a... |
| CVE-2026-55675 | CRITICAL | 10 | — | Oct 13, 2026 | The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb... |
| CVE-2026-55376 | HIGH | 8.8 | 0.4% | Oct 13, 2026 | Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an... |
| CVE-2026-54700 | MEDIUM | 6.9 | 0.4% | Oct 13, 2026 | ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protoco... |
| CVE-2026-54697 | MEDIUM | 6.7 | 0.1% | Oct 13, 2026 | ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readL... |
| CVE-2026-49265 | MEDIUM | 6.8 | 0.4% | Oct 13, 2026 | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.0.0 until 4.0.0, OAuthLib's PKC... |
| CVE-2026-49264 | MEDIUM | 6.1 | 0.3% | Oct 13, 2026 | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 0.6.1 until 4.0.0, OAuthLib's Rev... |
| CVE-2026-110025 | HIGH | 7.3 | 0.4% | Oct 13, 2026 | A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file in... |
| CVE-2026-109605 | HIGH | 7.3 | 0.5% | Oct 13, 2026 | A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function A... |
| CVE-2026-109526 | LOW | 3.3 | 0.1% | Oct 13, 2026 | A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component e... |
| CVE-2026-109525 | HIGH | 7.3 | — | Oct 13, 2026 | A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9... |