CVE Vulnerability Database
Search and browse 424,703 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109202 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the zip-export servlet that a... |
| CVE-2026-109201 | HIGH | 8.3 | 0.3% | Oct 12, 2026 | LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operation... |
| CVE-2026-109200 | MEDIUM | 6.4 | 0.2% | Oct 12, 2026 | LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XML... |
| CVE-2026-109199 | HIGH | 8.8 | 0.4% | Oct 12, 2026 | LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to exec... |
| CVE-2026-109170 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | LogicalDOC Community Edition through 9.3 contains an HQL injection vulnerability in DocumentsDataServlet that allows aut... |
| CVE-2026-109169 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | LogicalDOC Community Edition through 9.3 contains a sql injection vulnerability that allows authenticated users to execu... |
| CVE-2026-108894 | CRITICAL | 9.9 | 2.2% | Oct 12, 2026 | A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /g... |
| CVE-2026-108893 | CRITICAL | 9.9 | 0.5% | Oct 12, 2026 | A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /... |
| CVE-2026-108892 | CRITICAL | 10 | 0.6% | Oct 12, 2026 | A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function ssid1MACFilter of t... |
| CVE-2026-108890 | MEDIUM | 6.3 | 0.5% | Oct 12, 2026 | A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue is the func... |
| CVE-2026-103502 | MEDIUM | 5.9 | 0.2% | Oct 12, 2026 | Improper Certificate Validation vulnerability in hexpm hex_core allows an attacker who can intercept HTTPS connections t... |
| CVE-2026-93695 | HIGH | 7.4 | 0.2% | Oct 12, 2026 | In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when con... |
| CVE-2026-93694 | MEDIUM | 4 | 0.1% | Oct 12, 2026 | In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to... |
| CVE-2026-93693 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations a... |
| CVE-2026-52903 | HIGH | 8.8 | 0.4% | Oct 12, 2026 | A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides YAML.safe_... |
| CVE-2026-109188 | MEDIUM | 4.3 | 0.3% | Oct 12, 2026 | jshERP through 3.6 contains a missing authorization vulnerability that allows low-privilege authenticated users to creat... |
| CVE-2026-109187 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | jshERP through 3.6 contains an information disclosure vulnerability that allows any authenticated user to read platform-... |
| CVE-2026-109186 | HIGH | 8.8 | 0.4% | Oct 12, 2026 | jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticat... |
| CVE-2026-109185 | HIGH | 8.8 | 0.3% | Oct 12, 2026 | jshERP through 3.6 contains a missing authorization vulnerability in the UserController updateUser handler that allows a... |
| CVE-2026-109184 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | jshERP through 3.6 contains an improper authorization vulnerability that allows low-privilege authenticated users to rea... |
| CVE-2026-109183 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to create pre-approved... |
| CVE-2026-109182 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | jshERP through 3.6 contains an incorrect authorization vulnerability in GET /supplier/exportExcel that allows authentica... |
| CVE-2026-109181 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users restricted to personal... |
| CVE-2026-109180 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to read data from unas... |
| CVE-2026-109179 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to... |