CVE Vulnerability Database
Search and browse 424,703 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109178 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to... |
| CVE-2026-109177 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | MoguBlog through 6.2 contains a broken access control vulnerability that allows authenticated administrators to move or ... |
| CVE-2026-109176 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators... |
| CVE-2026-109175 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators... |
| CVE-2026-109174 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | MoguBlog through 6.2 contains an information disclosure vulnerability that allows low-privileged front-end users to read... |
| CVE-2026-109173 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to... |
| CVE-2026-109172 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to... |
| CVE-2026-109171 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to... |
| CVE-2026-109168 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to ... |
| CVE-2026-109167 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | TDuck survey form through 6.0 contains an insecure direct object reference vulnerability in the saveFormTheme handler th... |
| CVE-2026-109166 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to ... |
| CVE-2026-109165 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | TDuck survey form through 6.0 contains a broken access control vulnerability that allows authenticated users to add fiel... |
| CVE-2026-109164 | HIGH | 7.1 | 0.3% | Oct 12, 2026 | TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users... |
| CVE-2026-108953 | HIGH | 7.8 | 0.7% | Oct 12, 2026 | mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command ... |
| CVE-2026-108952 | MEDIUM | 4.6 | 0.2% | Oct 12, 2026 | RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that al... |
| CVE-2026-108951 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged user... |
| CVE-2026-108950 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | Open Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerability in ossn_album_page_handler... |
| CVE-2026-108889 | MEDIUM | 4.4 | 0.2% | Oct 12, 2026 | A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub_1400... |
| CVE-2026-108836 | HIGH | 7.3 | 0.5% | Oct 12, 2026 | A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/mo... |
| CVE-2026-108835 | MEDIUM | 4.4 | 0.1% | Oct 12, 2026 | A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. Impacted is the function sub_14000885C in the ... |
| CVE-2026-108834 | MEDIUM | 4.3 | 0.4% | Oct 12, 2026 | A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file ... |
| CVE-2026-108831 | MEDIUM | 6.3 | 0.3% | Oct 12, 2026 | A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown cod... |
| CVE-2026-105081 | MEDIUM | 4.4 | 0.1% | Oct 12, 2026 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthori... |
| CVE-2026-85499 | CRITICAL | 9.1 | 0.2% | Oct 12, 2026 | Improper Authorization vulnerability in Apache SkyWalking BanyanDB. The Canopy includes incomplete proof-of-concept r... |
| CVE-2026-108830 | MEDIUM | 4.2 | 0.2% | Oct 12, 2026 | A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugi... |