CVE Vulnerability Database

Search and browse 424,301 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-44414MEDIUM6.8A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, In...
CVE-2026-109854LOW2.5A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text ...
CVE-2026-109162MEDIUM6.3Forms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploaded files in the def...
CVE-2026-109152MEDIUM5.4A security vulnerability has been detected in jbardin scp.py up to 0.16.1. The impacted element is the function _recv_fi...
CVE-2026-109149MEDIUM5.3A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function...
CVE-2026-109144MEDIUM5.3A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the co...
CVE-2026-102076HIGH7.5A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ver...
CVE-2026-102075HIGH7.5A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ver...
CVE-2026-102074HIGH7.5A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ver...
CVE-2026-102073HIGH8.2A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ver...
CVE-2026-96535MEDIUM5.1Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture v...
CVE-2026-89309CRITICAL10The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases. First, it on...
CVE-2026-13138HIGH8.6Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketin...
CVE-2026-109699MEDIUM5.4Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Conf...
CVE-2026-109697MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S...
CVE-2026-109696MEDIUM5.4Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorrectly Confi...
CVE-2026-109691MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Sli...
CVE-2026-109687HIGH7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC L...
CVE-2026-109684MEDIUM5.3Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control ...
CVE-2026-109143MEDIUM5.4A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function creden...
CVE-2026-109116HIGH7.3A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff...
CVE-2026-109115HIGH7.3A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c....
CVE-2026-109114HIGH7.3A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff...
CVE-2026-109110CRITICAL10A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemo...
CVE-2026-108496MEDIUM5.3Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Con...