CVE Vulnerability Database
Search and browse 424,771 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105412 | HIGH | 7.1 | 0.2% | Oct 12, 2026 | An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the ... |
| CVE-2026-105411 | HIGH | 8.1 | 0.2% | Oct 12, 2026 | An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through ... |
| CVE-2026-105410 | HIGH | 8.7 | 0.2% | Oct 12, 2026 | A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow... |
| CVE-2026-105409 | HIGH | 8.7 | 0.2% | Oct 12, 2026 | A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow... |
| CVE-2026-105408 | HIGH | 8.7 | 0.2% | Oct 12, 2026 | A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow... |
| CVE-2026-105407 | HIGH | 8.8 | 1.8% | Oct 12, 2026 | An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker... |
| CVE-2026-103903 | HIGH | 8.8 | 0.4% | Oct 12, 2026 | An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenti... |
| CVE-2026-103902 | HIGH | 7.5 | 0.1% | Oct 12, 2026 | Improper verification of cryptographic signature vulnerability in DigiDoc libdigidocpp, DigiDoc DigiDoc4, DigiDoc DigiDo... |
| CVE-2026-108979 | — | — | — | Oct 12, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2026-108822 | MEDIUM | 5.3 | 0.8% | Oct 12, 2026 | A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_calling_party ... |
| CVE-2026-108821 | MEDIUM | 6.3 | 0.2% | Oct 12, 2026 | A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of ... |
| CVE-2026-108820 | MEDIUM | 6.3 | 0.3% | Oct 12, 2026 | A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in t... |
| CVE-2026-108819 | HIGH | 7.3 | 0.3% | Oct 12, 2026 | A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of ... |
| CVE-2026-1907 | HIGH | 7.5 | 0.1% | Oct 12, 2026 | A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operati... |
| CVE-2026-108818 | HIGH | 7.3 | 0.5% | Oct 12, 2026 | A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependen... |
| CVE-2026-108817 | MEDIUM | 5.5 | 1.1% | Oct 12, 2026 | A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run... |
| CVE-2026-108816 | MEDIUM | 6.3 | 0.3% | Oct 12, 2026 | A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code o... |
| CVE-2026-108815 | LOW | 3.5 | 0.2% | Oct 12, 2026 | A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/member_deal.php. The ma... |
| CVE-2026-108168 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DLX Plugins Custom... |
| CVE-2026-107869 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Missing Authorization vulnerability in WP Desk Flexible Subscriptions flexible-subscriptions allows Exploiting Incorrect... |
| CVE-2026-107866 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElem... |
| CVE-2026-107865 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetMenu... |
| CVE-2026-107864 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inser... |
| CVE-2026-107863 | MEDIUM | 5.3 | 0.2% | Oct 12, 2026 | Missing Authorization vulnerability in Codection Products Restricted Users for WooCommerce woo-products-restricted-users... |
| CVE-2026-107423 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Con... |