CVE Vulnerability Database
Search and browse 424,659 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109652 | HIGH | 8.8 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because u... |
| CVE-2026-109651 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a server-side request forgery vulnerability caused by a ... |
| CVE-2026-109650 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109649 | MEDIUM | 6.5 | — | Oct 12, 2026 | Frappe ERPNext before 15.102.0 and 16.x before 16.11.0 contains an SQL injection vulnerability in some endpoints due to ... |
| CVE-2026-109648 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to ... |
| CVE-2026-109647 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in multiple endpoints cau... |
| CVE-2026-109646 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to ... |
| CVE-2026-109645 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109644 | MEDIUM | 6.5 | — | Oct 12, 2026 | Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109643 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.111.0 and 16.x before 16.22.0 contains a missing authorization vulnerability in certain project... |
| CVE-2026-109642 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in which certain e... |
| CVE-2026-109641 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in certain endpoin... |
| CVE-2026-109640 | HIGH | 8.1 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 16.22.0 contains a missing authorization vulnerability that allows authenticated users to modify r... |
| CVE-2026-109639 | MEDIUM | 6.5 | — | Oct 12, 2026 | Frappe ERPNext before 15.102.0 and 16.x before 16.8.0 contains an SQL injection vulnerability in some endpoints due to m... |
| CVE-2026-109638 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a SQL injection vulnerability in some endpoints caused b... |
| CVE-2026-109637 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 16.14.0 contains a missing authorization vulnerability that allows authenticated users to modify m... |
| CVE-2026-109636 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.115.0 and 16.x before 16.26.0 contains a missing authorization vulnerability because certain en... |
| CVE-2026-109635 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.105.0 and 16.x before 16.15.0 contains a missing authorization vulnerability in certain documen... |
| CVE-2026-109634 | MEDIUM | 4.9 | — | Oct 12, 2026 | Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in some endpoints due to ... |
| CVE-2026-109633 | HIGH | 8.1 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because cont... |
| CVE-2026-109632 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.121.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in which certain e... |
| CVE-2026-109631 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that la... |
| CVE-2026-109630 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in which certain e... |
| CVE-2026-109629 | MEDIUM | 4.3 | — | Oct 12, 2026 | Frappe ERPNext before 15.121.3 and 16.x before 16.35.0 contains a missing authorization vulnerability in an endpoint tha... |
| CVE-2026-109628 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in certain endpoin... |