CVE Vulnerability Database
Search and browse 424,847 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108734 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | Frappe CRM 1.49.0 through 1.87.0 contains a missing authorization vulnerability in crm.api.doc.get_linked_docs_of_docume... |
| CVE-2026-108733 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization ... |
| CVE-2026-108732 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization ... |
| CVE-2026-108731 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-... |
| CVE-2026-108730 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability in legacy methods in raven/api/raven_message.py... |
| CVE-2026-108729 | MEDIUM | 5.9 | 0.3% | Oct 11, 2026 | Corteza through 2024.9.10 contains an incorrect authorization vulnerability in compose attachment endpoints that allows ... |
| CVE-2026-108728 | MEDIUM | 6.5 | 0.2% | Oct 11, 2026 | Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to o... |
| CVE-2026-108727 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | EdgeEver through 1.108.0 contains a missing authorization vulnerability in the Hono API memo-template routes that allows... |
| CVE-2026-108726 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privile... |
| CVE-2026-108725 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | Cheshire Cat AI core through 2.0.23 contains a stored cross-site scripting vulnerability in the uploads plugin that allo... |
| CVE-2026-108724 | MEDIUM | 5.3 | 0.3% | Oct 11, 2026 | Sylius through 2.3.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read unmode... |
| CVE-2026-108723 | LOW | 2.5 | 0.1% | Oct 11, 2026 | answer-me-with-html through 0.5.0 contains a link following vulnerability in the am CLI code block src= embedding, where... |
| CVE-2026-108722 | MEDIUM | 4.2 | 0.2% | Oct 11, 2026 | open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.write_log_file i... |
| CVE-2026-108721 | MEDIUM | 5.3 | 0.1% | Oct 11, 2026 | Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that allows local ... |
| CVE-2026-108720 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to vi... |
| CVE-2026-108719 | MEDIUM | 5 | 0.3% | Oct 11, 2026 | LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reac... |
| CVE-2026-108718 | HIGH | 8.1 | 0.3% | Oct 11, 2026 | Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authoriz... |
| CVE-2026-108717 | MEDIUM | 6.3 | 0.3% | Oct 11, 2026 | Combodo iTop 3.1.0 through 3.3.0 contains a missing authorization vulnerability in LinkSetController.php that allows aut... |
| CVE-2026-108716 | MEDIUM | 5.3 | 0.2% | Oct 11, 2026 | mcp-remote 0.8.0 through 0.14.3 contains a cleartext transmission vulnerability in authorizeWithDeviceCode that sends cl... |
| CVE-2026-108715 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | LibreNMS through 26.9.1.1 contains an authorization bypass vulnerability in includes/html/graphs/smokeping/auth.inc.php ... |
| CVE-2026-108714 | HIGH | 7.5 | 0.4% | Oct 11, 2026 | MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exh... |
| CVE-2026-108713 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | SuiteCRM through 7.15.2 and 8.x through 8.10.2 contains a missing authorization vulnerability that allows authenticated ... |
| CVE-2026-108712 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | SuiteCRM through 7.15.2 and 8.10.2 contains a missing authorization vulnerability in the DetailUserRole entry point that... |
| CVE-2026-108711 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | Plastic Labs Honcho through 3.3.0 contains an incorrect authorization vulnerability that allows peer- or session-scoped ... |
| CVE-2026-108710 | MEDIUM | 6.5 | 0.3% | Oct 11, 2026 | NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-data... |