CVE Vulnerability Database
Search and browse 424,279 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-12656 | HIGH | 8.7 | 0.3% | Oct 13, 2026 | A denial-of-service security issue exists in the affected product and version. The security issue stems from improper ha... |
| CVE-2026-12655 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserve... |
| CVE-2026-11732 | HIGH | 8.8 | 0.2% | Oct 13, 2026 | An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR route... |
| CVE-2026-11731 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with a... |
| CVE-2026-11730 | MEDIUM | 5.4 | 0.2% | Oct 13, 2026 | Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker h... |
| CVE-2026-109523 | HIGH | 7.3 | 0.3% | Oct 13, 2026 | A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d... |
| CVE-2026-109522 | HIGH | 7.3 | 0.4% | Oct 13, 2026 | A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9... |
| CVE-2026-109521 | HIGH | 7.3 | — | Oct 13, 2026 | A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999... |
| CVE-2026-108185 | HIGH | 7.4 | 0.2% | Oct 13, 2026 | Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to con... |
| CVE-2026-108184 | HIGH | 7.4 | 0.2% | Oct 13, 2026 | Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an info... |
| CVE-2026-107918 | MEDIUM | 4.5 | 0.1% | Oct 13, 2026 | Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated admini... |
| CVE-2026-107917 | MEDIUM | 4.5 | 0.1% | Oct 13, 2026 | Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated admi... |
| CVE-2026-107460 | CRITICAL | 9.1 | 0.2% | Oct 13, 2026 | Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-shee... |
| CVE-2026-106108 | MEDIUM | 5.7 | 0.2% | Oct 13, 2026 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/ap... |
| CVE-2026-104192 | CRITICAL | 9.6 | — | Oct 13, 2026 | Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueObjLoader::CreateStrea... |
| CVE-2026-103028 | MEDIUM | 4.3 | 0.2% | Oct 13, 2026 | SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy p... |
| CVE-2026-102603 | MEDIUM | 5.3 | 0.3% | Oct 13, 2026 | Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the pass... |
| CVE-2026-102342 | MEDIUM | 5.4 | 0.4% | Oct 13, 2026 | ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.3, 4.0.3, and 4.1.4, applications that... |
| CVE-2026-102250 | HIGH | 8.6 | 0.2% | Oct 13, 2026 | CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be up... |
| CVE-2024-34319 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | A Server-Side Request Forgery (SSRF) in the serviceURL parameter of ProPhoenix Law RMS v2022.2403.3.101 allows attackers... |
| CVE-2026-95680 | HIGH | 8 | — | Oct 13, 2026 | IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to a... |
| CVE-2026-93907 | HIGH | 8.1 | — | Oct 13, 2026 | IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a fla... |
| CVE-2026-93347 | MEDIUM | 4.9 | 0.3% | Oct 13, 2026 | Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_list_file helper that allows malicious... |
| CVE-2026-93346 | MEDIUM | 5.3 | 0.3% | Oct 13, 2026 | Wazuh from 4.0.0 before 4.14.8 contains a race condition in API login throttling that allows unauthenticated attackers t... |
| CVE-2026-77362 | MEDIUM | 4.3 | 0.2% | Oct 13, 2026 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools d... |