CVE Vulnerability Database

Search and browse 424,703 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-108829MEDIUM4.7A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the...
CVE-2026-108828MEDIUM4.1A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/...
CVE-2026-108827MEDIUM4.1A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zen_call_function of the file admin/inc...
CVE-2026-105283MEDIUM6.3Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unaut...
CVE-2026-108826HIGH7.3A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen_db_perform in the library includes/modu...
CVE-2026-108825MEDIUM5.4A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the fil...
CVE-2026-108824MEDIUM6.3A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/...
CVE-2026-105412HIGH7.1An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the ...
CVE-2026-105411HIGH8.1An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through ...
CVE-2026-105410HIGH8.7A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow...
CVE-2026-105409HIGH8.7A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow...
CVE-2026-105408HIGH8.7A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow...
CVE-2026-105407HIGH8.8An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker...
CVE-2026-103903HIGH8.8An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenti...
CVE-2026-103902HIGH7.5Improper verification of cryptographic signature vulnerability in DigiDoc libdigidocpp, DigiDoc DigiDoc4, DigiDoc DigiDo...
CVE-2026-108979——Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r...
CVE-2026-108822MEDIUM5.3A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_calling_party ...
CVE-2026-108821MEDIUM6.3A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of ...
CVE-2026-108820MEDIUM6.3A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in t...
CVE-2026-108819HIGH7.3A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of ...
CVE-2026-1907HIGH7.5A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operati...
CVE-2026-108818HIGH7.3A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependen...
CVE-2026-108817MEDIUM5.5A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run...
CVE-2026-108816MEDIUM6.3A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code o...
CVE-2026-108815LOW3.5A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/member_deal.php. The ma...