CVE Vulnerability Database
Search and browse 424,660 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109597 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | Hugo from v0.60.0 before v0.167.0 contains a stored cross-site scripting vulnerability that allows Markdown content auth... |
| CVE-2026-109596 | MEDIUM | 5.5 | 0.1% | Oct 12, 2026 | Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modu... |
| CVE-2026-109595 | MEDIUM | 5.5 | 0.1% | Oct 12, 2026 | Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to rea... |
| CVE-2026-109574 | MEDIUM | 5.5 | 0.1% | Oct 12, 2026 | Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read... |
| CVE-2026-109573 | HIGH | 8.1 | — | Oct 12, 2026 | phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with ba... |
| CVE-2026-109572 | HIGH | 7.6 | 0.3% | Oct 12, 2026 | Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows auth... |
| CVE-2026-108938 | MEDIUM | 5.3 | — | Oct 12, 2026 | A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db... |
| CVE-2026-108937 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown c... |
| CVE-2026-108936 | LOW | 2.4 | 0.2% | Oct 12, 2026 | A security vulnerability has been detected in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/fo... |
| CVE-2026-108935 | LOW | 2.4 | 0.3% | Oct 12, 2026 | A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the fil... |
| CVE-2026-102627 | HIGH | 8.8 | 0.5% | Oct 12, 2026 | IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary co... |
| CVE-2025-71432 | HIGH | 8.1 | 0.3% | Oct 12, 2026 | Frappe ERPNext before 14.92.1 and 15.x before 15.83.0 contains a reflected cross-site scripting vulnerability due to mis... |
| CVE-2025-71431 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not ... |
| CVE-2025-71430 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | Frappe before 14.99.10 and 15.x before 15.91.1 contains a stored cross-site scripting vulnerability in the leaderboard p... |
| CVE-2024-58391 | MEDIUM | 4.3 | 0.3% | Oct 12, 2026 | Frappe before 14.58.0 and 15.x before 15.4.0 contains a cross-site scripting vulnerability in printview because printvie... |
| CVE-2024-58390 | HIGH | 8.8 | 0.3% | Oct 12, 2026 | Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerability involving a certai... |
| CVE-2023-54412 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability in Email Template permis... |
| CVE-2023-54411 | MEDIUM | 5.9 | 0.3% | Oct 12, 2026 | Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derive... |
| CVE-2023-54410 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Frappe before 13.22.0 contains an improper authorization vulnerability that allows authenticated users to rename documen... |
| CVE-2023-54409 | MEDIUM | 4.8 | — | Oct 12, 2026 | Frappe before 13.46.1 and 14.x before 14.20.0 contains a cross-site scripting vulnerability because the html2text functi... |
| CVE-2023-54408 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | Frappe before 13.52.0 and 14.x before 14.31.0 contains an HTML injection vulnerability caused by weak escaping of user-s... |
| CVE-2023-54407 | MEDIUM | 4.9 | 0.3% | Oct 12, 2026 | Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to v... |
| CVE-2023-54406 | MEDIUM | 4.9 | 0.3% | Oct 12, 2026 | Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can... |
| CVE-2026-92876 | HIGH | 7.5 | 0.3% | Oct 12, 2026 | IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of ... |
| CVE-2026-90921 | HIGH | 7.5 | 0.3% | Oct 12, 2026 | IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handli... |