CVE Vulnerability Database
Search and browse 424,771 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108893 | CRITICAL | 9.9 | 0.5% | Oct 12, 2026 | A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /... |
| CVE-2026-108892 | CRITICAL | 10 | 0.6% | Oct 12, 2026 | A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function ssid1MACFilter of t... |
| CVE-2026-108890 | MEDIUM | 6.3 | 0.5% | Oct 12, 2026 | A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue is the func... |
| CVE-2026-103502 | MEDIUM | 5.9 | 0.2% | Oct 12, 2026 | Improper Certificate Validation vulnerability in hexpm hex_core allows an attacker who can intercept HTTPS connections t... |
| CVE-2026-93695 | HIGH | 7.4 | 0.2% | Oct 12, 2026 | In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when con... |
| CVE-2026-93694 | MEDIUM | 4 | 0.1% | Oct 12, 2026 | In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to... |
| CVE-2026-93693 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations a... |
| CVE-2026-52903 | HIGH | 8.8 | 0.4% | Oct 12, 2026 | A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides YAML.safe_... |
| CVE-2026-109188 | MEDIUM | 4.3 | 0.3% | Oct 12, 2026 | jshERP through 3.6 contains a missing authorization vulnerability that allows low-privilege authenticated users to creat... |
| CVE-2026-109187 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | jshERP through 3.6 contains an information disclosure vulnerability that allows any authenticated user to read platform-... |
| CVE-2026-109186 | HIGH | 8.8 | 0.4% | Oct 12, 2026 | jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticat... |
| CVE-2026-109185 | HIGH | 8.8 | 0.3% | Oct 12, 2026 | jshERP through 3.6 contains a missing authorization vulnerability in the UserController updateUser handler that allows a... |
| CVE-2026-109184 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | jshERP through 3.6 contains an improper authorization vulnerability that allows low-privilege authenticated users to rea... |
| CVE-2026-109183 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to create pre-approved... |
| CVE-2026-109182 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | jshERP through 3.6 contains an incorrect authorization vulnerability in GET /supplier/exportExcel that allows authentica... |
| CVE-2026-109181 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users restricted to personal... |
| CVE-2026-109180 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to read data from unas... |
| CVE-2026-109179 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to... |
| CVE-2026-109178 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to... |
| CVE-2026-109177 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | MoguBlog through 6.2 contains a broken access control vulnerability that allows authenticated administrators to move or ... |
| CVE-2026-109176 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators... |
| CVE-2026-109175 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators... |
| CVE-2026-109174 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | MoguBlog through 6.2 contains an information disclosure vulnerability that allows low-privileged front-end users to read... |
| CVE-2026-109173 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to... |
| CVE-2026-109172 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to... |