CVE Vulnerability Database
Search and browse 424,678 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-102663 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | OpenList is a file list program that supports multiple storage backends. Prior to 4.2.4, the OpenList search API uses a ... |
| CVE-2026-77366 | CRITICAL | 9.9 | 0.3% | Oct 12, 2026 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, tool dispatch ... |
| CVE-2026-77364 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined read... |
| CVE-2026-77363 | HIGH | 8.8 | 0.2% | Oct 12, 2026 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable... |
| CVE-2026-6232 | MEDIUM | 5.2 | 0.2% | Oct 12, 2026 | An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a ... |
| CVE-2026-61994 | MEDIUM | 5.4 | — | Oct 12, 2026 | Missing Authorization vulnerability in RocketGeek WP-Members wp-members allows Exploiting Incorrectly Configured Access ... |
| CVE-2026-42689 | LOW | 3.7 | — | Oct 12, 2026 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Pixelite Ev... |
| CVE-2026-109448 | MEDIUM | 5.9 | 0.2% | Oct 12, 2026 | Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters t... |
| CVE-2026-109222 | — | — | — | Oct 12, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2026-108918 | CRITICAL | 10 | 2.0% | Oct 12, 2026 | A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP.... |
| CVE-2026-108917 | CRITICAL | 10 | 2.0% | Oct 12, 2026 | A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/... |
| CVE-2026-108916 | HIGH | 8.3 | 1.7% | Oct 12, 2026 | A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the file /goform/formAcce... |
| CVE-2026-108915 | CRITICAL | 9.9 | 0.4% | Oct 12, 2026 | A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Su... |
| CVE-2026-108486 | MEDIUM | 5.3 | — | Oct 12, 2026 | Missing Authorization vulnerability in WPMU DEV Forminator forminator allows Exploiting Incorrectly Configured Access Co... |
| CVE-2026-108482 | MEDIUM | 6.5 | — | Oct 12, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium A... |
| CVE-2026-108481 | HIGH | 7.4 | — | Oct 12, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon WordPress patreon-connect allows Cross Site Request F... |
| CVE-2026-108479 | HIGH | 8.1 | — | Oct 12, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon WordPress patreon-connect allows Cross Site Request F... |
| CVE-2026-107862 | MEDIUM | 6.5 | — | Oct 12, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz A... |
| CVE-2026-107418 | MEDIUM | 5.4 | — | Oct 12, 2026 | Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Contr... |
| CVE-2026-103080 | MEDIUM | 5.3 | — | Oct 12, 2026 | External Control of Assumed-Immutable Web Parameter vulnerability in VillaTheme Salevo woo-boost-sales allows Input Data... |
| CVE-2026-94451 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found wh... |
| CVE-2026-85976 | MEDIUM | 5.4 | 0.1% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input... |
| CVE-2026-85975 | HIGH | 7.5 | 0.2% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Am... |
| CVE-2026-85974 | HIGH | 7.4 | 0.1% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS c... |
| CVE-2026-85973 | HIGH | 7.4 | 0.1% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communi... |