CVE Vulnerability Database
Search and browse 424,660 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-92119 | CRITICAL | 9.1 | 0.3% | Oct 12, 2026 | REST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users a... |
| CVE-2026-92116 | CRITICAL | 9.1 | 0.1% | Oct 12, 2026 | OAuth1 callback validation vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users... |
| CVE-2026-84360 | HIGH | 8.1 | 0.3% | Oct 12, 2026 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the HTTP configuration mutation routes requir... |
| CVE-2026-84321 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, GenerateShortToken creates standalone short-t... |
| CVE-2026-84320 | MEDIUM | 6.3 | 0.2% | Oct 12, 2026 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.3, Nginx UI validates an automatic backup's stor... |
| CVE-2026-84319 | HIGH | 8.3 | 0.3% | Oct 12, 2026 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the regular HTTP configuration API rejects re... |
| CVE-2026-84318 | HIGH | 8.8 | 0.6% | Oct 12, 2026 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0-rc.6 until 2.4.1, the MCP tool nginx_config_add wr... |
| CVE-2026-84317 | HIGH | 8.8 | 0.4% | Oct 12, 2026 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, internal/config/validation.go (ValidateConfig... |
| CVE-2026-84316 | HIGH | 8.8 | 0.4% | Oct 12, 2026 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, config.ValidateConfigDirectives splits config... |
| CVE-2026-84315 | HIGH | 8.3 | 0.2% | Oct 12, 2026 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, Nginx UI does not apply RequireSecureSession ... |
| CVE-2026-84314 | HIGH | 8.7 | 0.3% | Oct 12, 2026 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the POST /api/users/:id user-management endpo... |
| CVE-2026-84313 | HIGH | 8.8 | 0.4% | Oct 12, 2026 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, POST /api/otp_enroll and POST /api/finish_pas... |
| CVE-2026-78673 | HIGH | 7.5 | 0.3% | Oct 12, 2026 | IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input ... |
| CVE-2026-75881 | HIGH | 7.5 | 0.3% | Oct 12, 2026 | IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of ... |
| CVE-2026-58462 | — | — | — | Oct 12, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-53997 | HIGH | 7.4 | 0.4% | Oct 12, 2026 | Netherman Portal del Hermano (portaldelhermano.es) before 2026-10-06 contains a broken authentication vulnerability in i... |
| CVE-2026-41508 | MEDIUM | 5.8 | 0.5% | Oct 12, 2026 | OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.4.0 until 3.8.0, the multip... |
| CVE-2026-41504 | MEDIUM | 5.8 | 0.4% | Oct 12, 2026 | OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the Native... |
| CVE-2026-18537 | HIGH | 8.7 | 0.2% | Oct 12, 2026 | IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input val... |
| CVE-2026-18533 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input val... |
| CVE-2026-18529 | HIGH | 8.7 | 0.7% | Oct 12, 2026 | IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection ... |
| CVE-2026-18517 | HIGH | 7.7 | 0.2% | Oct 12, 2026 | IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Loca... |
| CVE-2026-18513 | HIGH | 7.2 | 0.3% | Oct 12, 2026 | IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access co... |
| CVE-2026-16678 | MEDIUM | 4.5 | 0.2% | Oct 12, 2026 | IBM Power Systems Firmware FW1110.00 through FW1110.31, FW1120.00 through FW1120.01, and FW1060.00 through FW1060.81 cou... |
| CVE-2026-109571 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaire... |