CVE Vulnerability Database
Search and browse 424,678 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109338 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | SurrealDB before 3.3.0 contains a denial of service vulnerability that allows query-capable users to crash the server by... |
| CVE-2026-109337 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to infer field values hid... |
| CVE-2026-109336 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to read fields hidden by ... |
| CVE-2026-109335 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | SurrealDB from 3.0.0 before 3.3.0 contains an information disclosure vulnerability that allows record users to read valu... |
| CVE-2026-109334 | HIGH | 8.1 | 0.3% | Oct 12, 2026 | SurrealDB before 3.3.0 does not check the caller-selected namespace or database against the level at which a namespace- ... |
| CVE-2026-109333 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | SurrealDB from 3.0.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated record users ... |
| CVE-2026-109332 | LOW | 3.1 | 0.1% | Oct 12, 2026 | Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer._handleRequest in lib/mcp-... |
| CVE-2026-109331 | HIGH | 7.4 | 0.1% | Oct 12, 2026 | Network-AI from 5.14.0 before 5.15.2 contains a security control bypass vulnerability in the ClaudeHookBridge PreToolUse... |
| CVE-2026-109330 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows re... |
| CVE-2026-109329 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role adm... |
| CVE-2026-109328 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | Admidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-site scripting vulnerability in RegistrationPresent... |
| CVE-2026-109327 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 contains a reflected cross-site scripting vulnerability in system/... |
| CVE-2026-109326 | HIGH | 7.5 | 0.3% | Oct 12, 2026 | Grav before 2.1.7 contains an information disclosure vulnerability because bundled nginx, lighttpd, IIS, and Caddy 2 con... |
| CVE-2026-109325 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | Grav from 2.0.22 before 2.1.7 contains an authentication bypass vulnerability in the Clockwork profiler that trusts loop... |
| CVE-2026-109324 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Grav before 2.1.7 contains a denial of service vulnerability that allows authenticated media authors to exhaust memory b... |
| CVE-2026-109323 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | Grav Star Ratings 2.0.1 through 2.0.3 contains a missing authorization vulnerability that allows unauthenticated visitor... |
| CVE-2026-109322 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and A... |
| CVE-2026-109321 | CRITICAL | 9.1 | 0.4% | Oct 12, 2026 | Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisions OAuth accounts as ordinary Grav users with a d... |
| CVE-2026-109320 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | The Grav API plugin (grav-plugin-api) before 1.0.36 contains an improper session validation vulnerability that allows di... |
| CVE-2026-109319 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in A... |
| CVE-2026-109318 | HIGH | 8.8 | 1.2% | Oct 12, 2026 | Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors ... |
| CVE-2026-109317 | HIGH | 7.2 | 0.4% | Oct 12, 2026 | Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to ... |
| CVE-2026-109316 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated ... |
| CVE-2026-109315 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Grav from 2.0.22 before 2.1.7 contains an information disclosure vulnerability that allows page editors to read the Cloc... |
| CVE-2026-109314 | HIGH | 7.3 | 0.3% | Oct 12, 2026 | Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain p... |