CVE Vulnerability Database
Search and browse 424,771 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109171 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to... |
| CVE-2026-109168 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to ... |
| CVE-2026-109167 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | TDuck survey form through 6.0 contains an insecure direct object reference vulnerability in the saveFormTheme handler th... |
| CVE-2026-109166 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to ... |
| CVE-2026-109165 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | TDuck survey form through 6.0 contains a broken access control vulnerability that allows authenticated users to add fiel... |
| CVE-2026-109164 | HIGH | 7.1 | 0.3% | Oct 12, 2026 | TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users... |
| CVE-2026-108953 | HIGH | 7.8 | 0.7% | Oct 12, 2026 | mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command ... |
| CVE-2026-108952 | MEDIUM | 4.6 | 0.2% | Oct 12, 2026 | RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that al... |
| CVE-2026-108951 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged user... |
| CVE-2026-108950 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | Open Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerability in ossn_album_page_handler... |
| CVE-2026-108889 | MEDIUM | 4.4 | 0.2% | Oct 12, 2026 | A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub_1400... |
| CVE-2026-108836 | HIGH | 7.3 | 0.5% | Oct 12, 2026 | A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/mo... |
| CVE-2026-108835 | MEDIUM | 4.4 | 0.1% | Oct 12, 2026 | A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. Impacted is the function sub_14000885C in the ... |
| CVE-2026-108834 | MEDIUM | 4.3 | 0.4% | Oct 12, 2026 | A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file ... |
| CVE-2026-108831 | MEDIUM | 6.3 | 0.3% | Oct 12, 2026 | A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown cod... |
| CVE-2026-105081 | MEDIUM | 4.4 | 0.1% | Oct 12, 2026 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthori... |
| CVE-2026-85499 | CRITICAL | 9.1 | 0.2% | Oct 12, 2026 | Improper Authorization vulnerability in Apache SkyWalking BanyanDB. The Canopy includes incomplete proof-of-concept r... |
| CVE-2026-108830 | MEDIUM | 4.2 | 0.2% | Oct 12, 2026 | A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugi... |
| CVE-2026-108829 | MEDIUM | 4.7 | 0.3% | Oct 12, 2026 | A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the... |
| CVE-2026-108828 | MEDIUM | 4.1 | 0.3% | Oct 12, 2026 | A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/... |
| CVE-2026-108827 | MEDIUM | 4.1 | 0.3% | Oct 12, 2026 | A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zen_call_function of the file admin/inc... |
| CVE-2026-105283 | MEDIUM | 6.3 | 0.3% | Oct 12, 2026 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unaut... |
| CVE-2026-108826 | HIGH | 7.3 | 0.4% | Oct 12, 2026 | A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen_db_perform in the library includes/modu... |
| CVE-2026-108825 | MEDIUM | 5.4 | 0.4% | Oct 12, 2026 | A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the fil... |
| CVE-2026-108824 | MEDIUM | 6.3 | 0.4% | Oct 12, 2026 | A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/... |