CVE Vulnerability Database
Search and browse 424,817 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108812 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file ... |
| CVE-2026-108811 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php. ... |
| CVE-2026-108810 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the c... |
| CVE-2026-107432 | MEDIUM | 5.4 | 0.1% | Oct 12, 2026 | Missing Authorization vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly C... |
| CVE-2026-107430 | MEDIUM | 5.4 | 0.1% | Oct 12, 2026 | Missing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex videowhispe... |
| CVE-2026-107429 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Improper Validation of Specified Quantity in Input vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-liv... |
| CVE-2026-107427 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in NOUS Ouvert Utile et Simple Event post event-post allo... |
| CVE-2026-106605 | MEDIUM | 5.3 | 0.2% | Oct 12, 2026 | Improper Validation of Specified Quantity in Input vulnerability in WP Desk Flexible Quantity – Measurement Price Calcul... |
| CVE-2026-103356 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | Missing Authorization vulnerability in VillaTheme TMDS tmds-dropshipping-for-temu-and-woo allows Exploiting Incorrectly ... |
| CVE-2026-93582 | CRITICAL | 9.4 | 0.4% | Oct 12, 2026 | The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from e... |
| CVE-2026-93581 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input... |
| CVE-2026-78359 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser ba... |
| CVE-2026-78358 | MEDIUM | 4.3 | 0.1% | Oct 12, 2026 | Several administrative actions do not sufficiently validate whether a request was intentionally initiated by the authent... |
| CVE-2026-78357 | CRITICAL | 9.1 | 0.3% | Oct 12, 2026 | Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is d... |
| CVE-2026-78356 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remot... |
| CVE-2026-78355 | HIGH | 8.7 | 0.7% | Oct 12, 2026 | A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to refe... |
| CVE-2026-48212 | MEDIUM | 4.8 | 0.1% | Oct 12, 2026 | An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored by the app... |
| CVE-2026-48211 | MEDIUM | 5.4 | 0.1% | Oct 12, 2026 | An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Requ... |
| CVE-2026-109082 | MEDIUM | 6.8 | 0.2% | Oct 12, 2026 | A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services com... |
| CVE-2026-108809 | LOW | 3.5 | 0.2% | Oct 12, 2026 | A vulnerability was identified in Eleveo Call Recording Software up to 10.3.0. This issue affects some unknown processin... |
| CVE-2026-108808 | LOW | 2.6 | 0.2% | Oct 12, 2026 | A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code o... |
| CVE-2026-108807 | HIGH | 7.3 | 0.3% | Oct 12, 2026 | A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This a... |
| CVE-2026-98385 | HIGH | 7.8 | 0.1% | Oct 12, 2026 | In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched_cache_group from mm to ... |
| CVE-2026-84167 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | The Hotel Booking WordPress plugin through 3.8 does not verify that a booking record belongs to the user requesting it, ... |
| CVE-2026-84166 | MEDIUM | 4.3 | 0.1% | Oct 12, 2026 | The Hotel Booking WordPress plugin through 3.8 does not implement CSRF protection on its administrative booking order ma... |