CVE Vulnerability Database
Search and browse 424,901 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108713 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | SuiteCRM through 7.15.2 and 8.x through 8.10.2 contains a missing authorization vulnerability that allows authenticated ... |
| CVE-2026-108712 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | SuiteCRM through 7.15.2 and 8.10.2 contains a missing authorization vulnerability in the DetailUserRole entry point that... |
| CVE-2026-108711 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | Plastic Labs Honcho through 3.3.0 contains an incorrect authorization vulnerability that allows peer- or session-scoped ... |
| CVE-2026-108710 | MEDIUM | 6.5 | 0.3% | Oct 11, 2026 | NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-data... |
| CVE-2026-108584 | MEDIUM | 5.3 | 0.4% | Oct 11, 2026 | A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the ... |
| CVE-2026-108578 | MEDIUM | 5.3 | 0.5% | Oct 11, 2026 | A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of th... |
| CVE-2026-108577 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add... |
| CVE-2026-108576 | CRITICAL | 10 | 2.5% | Oct 11, 2026 | A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping of the compon... |
| CVE-2026-108575 | MEDIUM | 6.3 | 0.2% | Oct 11, 2026 | A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_... |
| CVE-2026-108574 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function ui_view_session_spend_logs... |
| CVE-2026-108573 | MEDIUM | 5.5 | 0.2% | Oct 11, 2026 | A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the func... |
| CVE-2026-108572 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate ... |
| CVE-2026-108571 | HIGH | 7.3 | 0.3% | Oct 11, 2026 | A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. This impacts the function kqjcmdModel::returnchuli ... |
| CVE-2026-108570 | MEDIUM | 6.3 | 0.2% | Oct 11, 2026 | A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the... |
| CVE-2026-108569 | MEDIUM | 6.3 | 0.3% | Oct 11, 2026 | A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Repl... |
| CVE-2026-108568 | MEDIUM | 4.3 | 0.1% | Oct 11, 2026 | A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is the function validatePaypalOrd... |
| CVE-2026-108567 | MEDIUM | 4.3 | 0.5% | Oct 11, 2026 | A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function files_delete_file of the file syst... |
| CVE-2026-108566 | LOW | 3.5 | 0.2% | Oct 11, 2026 | A vulnerability has been found in InstantSoft icms2 up to 2.18.2. This issue affects the function index of the file temp... |
| CVE-2026-108544 | MEDIUM | 6.3 | 0.3% | Oct 11, 2026 | A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function ... |
| CVE-2026-108543 | MEDIUM | 6.3 | 0.3% | Oct 11, 2026 | A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the com... |
| CVE-2026-108542 | MEDIUM | 6.3 | 0.2% | Oct 11, 2026 | A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of... |
| CVE-2026-97183 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | The WP-Invoice WordPress plugin through 4.3.1 does not perform capability checks in several of its AJAX handlers, allow... |
| CVE-2026-96227 | HIGH | 8.8 | 0.3% | Oct 11, 2026 | The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form-submission file-upload reques... |
| CVE-2026-94235 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | The MemberHero WordPress plugin through 6.9 does not perform any capability or nonce check on one of its AJAX actions, ... |
| CVE-2026-93550 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | The Veeqo for WooCommerce WordPress plugin through 2.2.8 does not restrict who can trigger its remote bridge-installatio... |