CVE Vulnerability Database
Search and browse 424,659 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-18541 | MEDIUM | 5.4 | 0.1% | Oct 12, 2026 | IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authentic... |
| CVE-2026-17475 | HIGH | 7.1 | 0.2% | Oct 12, 2026 | IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belon... |
| CVE-2026-109675 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Frappe Suite before commit 2697564a9c46da6acc614743eaf9915fe5238f4f contains a broken access control vulnerability in th... |
| CVE-2026-109674 | MEDIUM | 6.5 | — | Oct 12, 2026 | Frappe ERPNext before 15.98.0 and 16.x before 16.6.0 contains an SQL injection vulnerability in some endpoints caused by... |
| CVE-2026-109673 | HIGH | 7.3 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.103.0 and 16.x before 16.12.0 contains a stored cross-site scripting vulnerability because the ... |
| CVE-2026-109672 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.118.0 and 16.x before 16.27.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109671 | HIGH | 7.3 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.113.0 and 16.x before 16.24.0 contains a stored cross-site scripting vulnerability in a profile... |
| CVE-2026-109670 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a stored cross-site scripting vulnerability caused by re... |
| CVE-2026-109669 | MEDIUM | 4.3 | — | Oct 12, 2026 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in which certain e... |
| CVE-2026-109668 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109667 | HIGH | 8.8 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.111.0 and 16.x before 16.22.0 contains a privilege escalation vulnerability in a record-creatio... |
| CVE-2026-109666 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109665 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.108.0 and 16.x before 16.18.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109664 | MEDIUM | 4.3 | — | Oct 12, 2026 | Frappe ERPNext before 15.112.0 contains a missing authorization vulnerability that allows authenticated users with a com... |
| CVE-2026-109663 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.113.0 and 16.x before 16.22.0 contains an SQL injection vulnerability caused by missing input v... |
| CVE-2026-109662 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability in a public ... |
| CVE-2026-109661 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.116.0 and 16.x before 16.27.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109660 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 has certain endpoints that do not enforce proper authorization ch... |
| CVE-2026-109659 | MEDIUM | 6.5 | — | Oct 12, 2026 | Frappe ERPNext before 15.113.0 and 16.x before 16.24.0 contains a missing authorization vulnerability in which certain e... |
| CVE-2026-109658 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.115.0 and 16.x before 16.26.0 contains a missing authorization vulnerability in which certain e... |
| CVE-2026-109657 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | Frappe ERPNext 16.x before 16.27.0 contains a stored cross-site scripting vulnerability that allows users with edit righ... |
| CVE-2026-109656 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.118.2 and 16.x before 16.30.0 contains a missing authorization vulnerability in which certain e... |
| CVE-2026-109655 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.115.0 and 16.x before 16.26.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109654 | MEDIUM | 5.4 | — | Oct 12, 2026 | Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a missing authorization vulnerability in which certain e... |
| CVE-2026-109653 | HIGH | 7.3 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a stored cross-site scripting vulnerability because reco... |