CVE Vulnerability Database
Search and browse 424,279 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109524 | MEDIUM | 5.3 | 0.5% | Oct 13, 2026 | A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9... |
| CVE-2026-105460 | MEDIUM | 5.5 | 0.1% | Oct 13, 2026 | A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processin... |
| CVE-2026-104935 | HIGH | 8.6 | — | Oct 13, 2026 | Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arb... |
| CVE-2026-104005 | MEDIUM | 6.5 | 0.2% | Oct 13, 2026 | A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrit... |
| CVE-2026-104004 | MEDIUM | 6.5 | 0.2% | Oct 13, 2026 | MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In som... |
| CVE-2026-103965 | MEDIUM | 5.4 | 0.1% | Oct 13, 2026 | An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during in... |
| CVE-2026-103928 | CRITICAL | 9.3 | 0.4% | Oct 13, 2026 | Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and... |
| CVE-2026-102988 | MEDIUM | 5.3 | 0.2% | Oct 13, 2026 | Plane is an open-source project management tool. Prior to 1.4.0, multiple issue-listing endpoints, including unauthentic... |
| CVE-2026-102982 | HIGH | 8.5 | — | Oct 13, 2026 | Plane is an open-source project management tool. Prior to 1.4.0, the plane comments fail to sanitize unsafe URL schemes ... |
| CVE-2026-102981 | MEDIUM | 6.5 | 0.2% | Oct 13, 2026 | Plane is an open-source project management tool. Prior to 1.4.0, self-hosted Plane deployments allow unauthenticated GET... |
| CVE-2026-102832 | MEDIUM | 4.2 | 0.1% | Oct 13, 2026 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Archit... |
| CVE-2026-102734 | MEDIUM | 5.5 | 0.1% | Oct 13, 2026 | asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the ... |
| CVE-2026-102702 | HIGH | 7.5 | 0.1% | Oct 13, 2026 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi... |
| CVE-2026-102700 | MEDIUM | 4.7 | 0.2% | Oct 13, 2026 | With its original introduction, GNTTAB_cache_flush was made available uniformly. XSA-232 (CVE-2017-14318) then covered ... |
| CVE-2026-102699 | HIGH | 7.5 | 0.1% | Oct 13, 2026 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi... |
| CVE-2026-102672 | MEDIUM | 6.7 | 0.1% | Oct 13, 2026 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10... |
| CVE-2026-101899 | MEDIUM | 6.9 | 0.5% | Oct 13, 2026 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy trea... |
| CVE-2024-34326 | MEDIUM | 6.1 | 0.2% | Oct 13, 2026 | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via t... |
| CVE-2024-34324 | CRITICAL | 9.1 | 0.3% | Oct 13, 2026 | An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a c... |
| CVE-2024-34323 | CRITICAL | 10 | 0.4% | Oct 13, 2026 | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogi... |
| CVE-2024-34321 | MEDIUM | 6.1 | 0.2% | Oct 13, 2026 | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via t... |
| CVE-2024-34320 | CRITICAL | 9.8 | 0.4% | Oct 13, 2026 | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoin... |
| CVE-2026-9218 | MEDIUM | 4.5 | 0.2% | Oct 13, 2026 | Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an attacker... |
| CVE-2026-97334 | HIGH | 8.7 | 0.4% | Oct 13, 2026 | The network messaging layer contained improper handling of highly compressed data affecting service availability. Softw... |
| CVE-2026-97333 | HIGH | 7.1 | 0.2% | Oct 13, 2026 | QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved mai... |