CVE Vulnerability Database
Search and browse 424,321 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109611 | MEDIUM | 4.3 | — | Oct 12, 2026 | Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109610 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a missing authorization vulnerability because certain en... |
| CVE-2026-109609 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that la... |
| CVE-2026-109608 | HIGH | 8.8 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in several endpoints that... |
| CVE-2026-109604 | HIGH | 7.3 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability because a to... |
| CVE-2026-109603 | LOW | 3.3 | — | Oct 12, 2026 | Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library (CVE-2025-26240) for... |
| CVE-2026-109602 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | Frappe before 15.118.0 and 16.x before 16.31.0 contains a stored cross-site scripting vulnerability in dashboard chart f... |
| CVE-2026-109601 | HIGH | 7.5 | 0.3% | Oct 12, 2026 | Frappe Framework before 15.117.0 and 16.x before 16.30.0 contains an arbitrary file read vulnerability in the handling o... |
| CVE-2026-109600 | MEDIUM | 5.3 | 0.2% | Oct 12, 2026 | Frappe Framework before 15.118.0 and 16.x before 16.31.0 does not check whether a user account is disabled before sendin... |
| CVE-2026-109599 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Frappe before 15.113.3 and 16.x before 16.25.0 contains a missing authorization vulnerability in which certain endpoints... |
| CVE-2026-109598 | MEDIUM | 4.3 | — | Oct 12, 2026 | Frappe Framework before 15.120.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in the whitelist... |
| CVE-2026-109597 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | Hugo from v0.60.0 before v0.167.0 contains a stored cross-site scripting vulnerability that allows Markdown content auth... |
| CVE-2026-109596 | MEDIUM | 5.5 | 0.1% | Oct 12, 2026 | Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modu... |
| CVE-2026-109595 | MEDIUM | 5.5 | 0.1% | Oct 12, 2026 | Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to rea... |
| CVE-2026-109574 | MEDIUM | 5.5 | 0.1% | Oct 12, 2026 | Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read... |
| CVE-2026-109573 | HIGH | 8.1 | — | Oct 12, 2026 | phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with ba... |
| CVE-2026-109572 | HIGH | 7.6 | 0.3% | Oct 12, 2026 | Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows auth... |
| CVE-2026-108938 | MEDIUM | 5.3 | — | Oct 12, 2026 | A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db... |
| CVE-2026-108937 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown c... |
| CVE-2026-108936 | LOW | 2.4 | 0.2% | Oct 12, 2026 | A security vulnerability has been detected in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/fo... |
| CVE-2026-108935 | LOW | 2.4 | 0.3% | Oct 12, 2026 | A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the fil... |
| CVE-2026-102627 | HIGH | 8.8 | 0.5% | Oct 12, 2026 | IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary co... |
| CVE-2025-71432 | HIGH | 8.1 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 14.92.1 and 15.x before 15.83.0 contains a reflected cross-site scripting vulnerability due to mis... |
| CVE-2025-71431 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not ... |
| CVE-2025-71430 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | Frappe before 14.99.10 and 15.x before 15.91.1 contains a stored cross-site scripting vulnerability in the leaderboard p... |