CVE Vulnerability Database
Search and browse 424,703 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108896 | CRITICAL | 9.9 | 2.2% | Oct 12, 2026 | A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of the file /goform/set... |
| CVE-2026-108895 | CRITICAL | 9.9 | 2.2% | Oct 12, 2026 | A weakness has been identified in Linksys E1700 1.0.0.4.003. The affected element is the function setDMZ of the file /go... |
| CVE-2026-108094 | HIGH | 7.8 | 0.1% | Oct 12, 2026 | A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local attacker w... |
| CVE-2026-103537 | MEDIUM | 5.4 | 0.4% | Oct 12, 2026 | Thelia 2.6.1 contains an absolute path traversal vulnerability in its Smarty template handling that enables SSTI and rem... |
| CVE-2026-103535 | HIGH | 8.8 | 0.5% | Oct 12, 2026 | Thelia v2.6.1 contains path traversal and PHP code injection vulnerabilities in its translation editor that can be chain... |
| CVE-2026-103529 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without val... |
| CVE-2026-103528 | MEDIUM | 5.4 | 0.4% | Oct 12, 2026 | Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions. An authenti... |
| CVE-2026-103527 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | Thelia v2.6.0's Smarty templates (address.html and address-update.html) fail to properly escape double quotes in the “ne... |
| CVE-2026-103526 | LOW | 3.7 | — | Oct 12, 2026 | In Thelia v2.6.0, both the administrative login and forgotten password endpoints return different responses for invalid ... |
| CVE-2026-103524 | MEDIUM | 4.8 | 0.2% | Oct 12, 2026 | Thelia v2.6.0 is vulnerable to multiple stored XSS vulnerabilities within the administrative interface. User-supplied in... |
| CVE-2026-103523 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | Thelia v2.6.0 contains an open redirect vulnerability in its address creation workflow. After a user accesses a crafted ... |
| CVE-2026-103522 | HIGH | 7.2 | — | Oct 12, 2026 | In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on c... |
| CVE-2026-103521 | HIGH | 7.2 | — | Oct 12, 2026 | In Thelia v2.6.0, the document upload endpoint properly blocks the upload of executable file types, but the document upd... |
| CVE-2026-68764 | — | — | — | Oct 12, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-18390 | HIGH | 7.8 | 0.5% | Oct 12, 2026 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Ministry of ... |
| CVE-2026-12613 | HIGH | 8.8 | 0.3% | Oct 12, 2026 | Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYA... |
| CVE-2026-109229 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | SGLang through 0.5.21 contains a denial of service vulnerability that disables Pillow decompression bomb protection proc... |
| CVE-2026-109228 | HIGH | 7.5 | 0.5% | Oct 12, 2026 | SGLang through 0.5.21 contains a resource budget bypass vulnerability that allows remote attackers to override GLM-V vid... |
| CVE-2026-109227 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | SGLang through 0.5.21 contains an unbounded memory allocation vulnerability in preprocess_video in qwen_vl.py that decod... |
| CVE-2026-109226 | HIGH | 7.5 | 0.5% | Oct 12, 2026 | SGLang through 0.5.21 contains a decompression amplification vulnerability in load_audio that allows remote attackers to... |
| CVE-2026-109225 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | SGLang through 0.5.21 contains an unbounded memory allocation vulnerability that allows unauthenticated remote attackers... |
| CVE-2026-109206 | MEDIUM | 5.3 | 0.2% | Oct 12, 2026 | LogicalDOC Community Edition through 9.3 contains a username enumeration vulnerability that allows unauthenticated attac... |
| CVE-2026-109205 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that... |
| CVE-2026-109204 | MEDIUM | 6.3 | 0.2% | Oct 12, 2026 | LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet tha... |
| CVE-2026-109203 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the ConvertPdf servlet that a... |