CVE Vulnerability Database
Search and browse 424,771 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108807 | HIGH | 7.3 | 0.3% | Oct 12, 2026 | A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This a... |
| CVE-2026-98385 | HIGH | 7.8 | 0.1% | Oct 12, 2026 | In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched_cache_group from mm to ... |
| CVE-2026-84167 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | The Hotel Booking WordPress plugin through 3.8 does not verify that a booking record belongs to the user requesting it, ... |
| CVE-2026-84166 | MEDIUM | 4.3 | 0.1% | Oct 12, 2026 | The Hotel Booking WordPress plugin through 3.8 does not implement CSRF protection on its administrative booking order ma... |
| CVE-2026-109080 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to ... |
| CVE-2026-108806 | HIGH | 7.3 | 0.3% | Oct 12, 2026 | A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. A... |
| CVE-2026-108805 | HIGH | 7.3 | 0.3% | Oct 12, 2026 | A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected b... |
| CVE-2026-108804 | CRITICAL | 10 | 2.4% | Oct 12, 2026 | A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fw... |
| CVE-2026-108803 | MEDIUM | 6.3 | 0.2% | Oct 12, 2026 | A security vulnerability has been detected in y_project RuoYi up to 4.8.3. This impacts the function changeStatus of the... |
| CVE-2026-108802 | LOW | 3.5 | 0.2% | Oct 12, 2026 | A weakness has been identified in y_project RuoYi up to 4.8.3. This affects the function renderDrawer of the file /syste... |
| CVE-2026-107791 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | The WP Comment Cleaner WordPress plugin before 7.2 does not perform a capability check or validate a nonce on one of it... |
| CVE-2026-107203 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** package. The dom... |
| CVE-2026-107193 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | A flaw has been found in **permission filters** in the **foreman** package. The API loads a filter by its identifier and... |
| CVE-2025-15703 | LOW | 3.5 | 0.1% | Oct 12, 2026 | The HireZoot WordPress plugin before 4.0.0 does not sanitise and escape one of its job specification settings before it... |
| CVE-2026-87690 | HIGH | 8.8 | 0.4% | Oct 12, 2026 | The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vul... |
| CVE-2026-21139 | HIGH | 7.3 | 0.1% | Oct 12, 2026 | Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers ... |
| CVE-2026-21138 | MEDIUM | 6.9 | 0.1% | Oct 12, 2026 | Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to inst... |
| CVE-2026-21137 | MEDIUM | 5.1 | 0.2% | Oct 12, 2026 | Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privi... |
| CVE-2026-21136 | MEDIUM | 6.8 | 0.1% | Oct 12, 2026 | Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore p... |
| CVE-2026-21135 | MEDIUM | 5.9 | 0.1% | Oct 12, 2026 | Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive informa... |
| CVE-2026-21134 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive informat... |
| CVE-2026-21133 | MEDIUM | 5.1 | 0.1% | Oct 12, 2026 | Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data. |
| CVE-2026-21132 | MEDIUM | 6 | 0.5% | Oct 12, 2026 | Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary scr... |
| CVE-2026-21131 | LOW | 2.1 | 0.1% | Oct 12, 2026 | Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary act... |
| CVE-2026-21130 | MEDIUM | 5.1 | 0.1% | Oct 12, 2026 | Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attac... |