CVE Vulnerability Database
Search and browse 424,703 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109238 | HIGH | 8.6 | 0.3% | Oct 12, 2026 | Crawl4AI 0.7.0 before 0.9.4 contains a server-side request forgery vulnerability that allows API clients to reach intern... |
| CVE-2026-109237 | HIGH | 8.1 | 0.3% | Oct 12, 2026 | Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct... |
| CVE-2026-108914 | CRITICAL | 9.9 | 0.6% | Oct 12, 2026 | A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform... |
| CVE-2026-108909 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | A security flaw has been discovered in Netcore NR268 1.7.121109. Affected by this issue is some unknown functionality of... |
| CVE-2026-108908 | LOW | 2.4 | 0.3% | Oct 12, 2026 | A vulnerability was identified in Netcore NR268 1.7.121109. Affected by this vulnerability is the function eval of the f... |
| CVE-2026-108907 | CRITICAL | 10 | 1.2% | Oct 12, 2026 | A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the component CGI Execut... |
| CVE-2026-108478 | MEDIUM | 6.5 | — | Oct 12, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element P... |
| CVE-2026-108477 | MEDIUM | 5.3 | — | Oct 12, 2026 | Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Contr... |
| CVE-2026-108476 | MEDIUM | 5 | — | Oct 12, 2026 | Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting I... |
| CVE-2026-108475 | MEDIUM | 4.3 | — | Oct 12, 2026 | Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration all... |
| CVE-2026-105274 | LOW | 2.1 | 0.4% | Oct 12, 2026 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted rep... |
| CVE-2026-9191 | CRITICAL | 9.6 | 0.2% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-s... |
| CVE-2026-96618 | LOW | 2.1 | 0.4% | Oct 12, 2026 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex allows an untrusted package ... |
| CVE-2026-96612 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in hexpm hex allows a malic... |
| CVE-2026-92682 | HIGH | 8.6 | 0.3% | Oct 12, 2026 | In @neo4j/graphql versions from 7.0.0 up to but not including 7.6.4, the none quantifier in @authorization filters on re... |
| CVE-2026-92681 | CRITICAL | 9.3 | 0.4% | Oct 12, 2026 | In @neo4j/graphql versions up to and including 7.6.3, @authentication directives applied at the schema level or on the Q... |
| CVE-2026-85956 | CRITICAL | 9.6 | 0.3% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with deleg... |
| CVE-2026-85955 | CRITICAL | 9.9 | 0.4% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query... |
| CVE-2026-85954 | HIGH | 8.6 | 0.2% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate user-controlled value... |
| CVE-2026-85953 | HIGH | 8.5 | 0.3% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStud... |
| CVE-2026-85952 | HIGH | 8.5 | 0.2% | Oct 12, 2026 | Affected Linux-based Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a ser... |
| CVE-2026-85951 | HIGH | 8.5 | 0.2% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 on Azure contain a server-side req... |
| CVE-2026-85950 | HIGH | 8.4 | 0.3% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw that... |
| CVE-2026-85949 | HIGH | 8.1 | 0.2% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive info... |
| CVE-2026-85948 | CRITICAL | 9.9 | 0.3% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw i... |