CVE Vulnerability Database
Search and browse 424,321 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109664 | MEDIUM | 4.3 | — | Oct 12, 2026 | Frappe ERPNext before 15.112.0 contains a missing authorization vulnerability that allows authenticated users with a com... |
| CVE-2026-109663 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.113.0 and 16.x before 16.22.0 contains an SQL injection vulnerability caused by missing input v... |
| CVE-2026-109662 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability in a public ... |
| CVE-2026-109661 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.116.0 and 16.x before 16.27.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109660 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 has certain endpoints that do not enforce proper authorization ch... |
| CVE-2026-109659 | MEDIUM | 6.5 | — | Oct 12, 2026 | Frappe ERPNext before 15.113.0 and 16.x before 16.24.0 contains a missing authorization vulnerability in which certain e... |
| CVE-2026-109658 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.115.0 and 16.x before 16.26.0 contains a missing authorization vulnerability in which certain e... |
| CVE-2026-109657 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | Frappe ERPNext 16.x before 16.27.0 contains a stored cross-site scripting vulnerability that allows users with edit righ... |
| CVE-2026-109656 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.118.2 and 16.x before 16.30.0 contains a missing authorization vulnerability in which certain e... |
| CVE-2026-109655 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.115.0 and 16.x before 16.26.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109654 | MEDIUM | 5.4 | — | Oct 12, 2026 | Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a missing authorization vulnerability in which certain e... |
| CVE-2026-109653 | HIGH | 7.3 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a stored cross-site scripting vulnerability because reco... |
| CVE-2026-109652 | HIGH | 8.8 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because u... |
| CVE-2026-109651 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a server-side request forgery vulnerability caused by a ... |
| CVE-2026-109650 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109649 | MEDIUM | 6.5 | — | Oct 12, 2026 | Frappe ERPNext before 15.102.0 and 16.x before 16.11.0 contains an SQL injection vulnerability in some endpoints due to ... |
| CVE-2026-109648 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to ... |
| CVE-2026-109647 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in multiple endpoints cau... |
| CVE-2026-109646 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to ... |
| CVE-2026-109645 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109644 | MEDIUM | 6.5 | — | Oct 12, 2026 | Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109643 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.111.0 and 16.x before 16.22.0 contains a missing authorization vulnerability in certain project... |
| CVE-2026-109642 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in which certain e... |
| CVE-2026-109641 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109640 | HIGH | 8.1 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 16.22.0 contains a missing authorization vulnerability that allows authenticated users to modify r... |