CVE Vulnerability Database
Search and browse 424,940 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108580 | MEDIUM | 6.5 | 0.3% | Oct 10, 2026 | AniWorld Downloader before 5.3.0 contains an improper restriction of authentication attempts vulnerability in the WebUI ... |
| CVE-2026-108579 | MEDIUM | 4.2 | 0.2% | Oct 10, 2026 | OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers to embed sp... |
| CVE-2026-108555 | MEDIUM | 4.2 | 0.1% | Oct 10, 2026 | PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer._setIP that allows remote attackers to join other ... |
| CVE-2026-108554 | MEDIUM | 5.3 | 0.2% | Oct 10, 2026 | PDFMathTranslate (pdf2zh) through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticate... |
| CVE-2026-108553 | HIGH | 7.5 | 0.2% | Oct 10, 2026 | OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote... |
| CVE-2026-108551 | CRITICAL | 9.8 | 0.4% | Oct 10, 2026 | openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an O... |
| CVE-2026-108550 | HIGH | 8.8 | 0.3% | Oct 10, 2026 | SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeControll... |
| CVE-2026-108549 | HIGH | 8.1 | 0.5% | Oct 10, 2026 | cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in pla... |
| CVE-2026-108548 | HIGH | 7.3 | 0.3% | Oct 10, 2026 | AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's auth_handler.lua that... |
| CVE-2026-108547 | MEDIUM | 6.5 | 0.2% | Oct 10, 2026 | AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users t... |
| CVE-2026-108546 | HIGH | 7.5 | 0.8% | Oct 10, 2026 | Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote at... |
| CVE-2026-108545 | MEDIUM | 5.9 | 0.6% | Oct 10, 2026 | SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attacke... |
| CVE-2026-108115 | MEDIUM | 4.9 | 0.2% | Oct 10, 2026 | Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to b... |
| CVE-2026-108114 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all... |
| CVE-2026-97264 | HIGH | 7.1 | 0.1% | Oct 10, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPA... |
| CVE-2026-97263 | HIGH | 7.1 | 0.1% | Oct 10, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPA... |
| CVE-2026-94676 | HIGH | 7.2 | 0.3% | Oct 10, 2026 | Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This iss... |
| CVE-2026-66435 | MEDIUM | 5.9 | 0.2% | Oct 10, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve ... |
| CVE-2026-108165 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | Immich through 3.3.1 contains a missing authorization vulnerability in the partner synchronization stream that allows au... |
| CVE-2026-108164 | MEDIUM | 6.5 | 0.3% | Oct 10, 2026 | Open Source Social Network (OSSN) through 10.1 contains an insecure direct object reference vulnerability in components/... |
| CVE-2026-108163 | MEDIUM | 6.5 | 0.2% | Oct 10, 2026 | Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified... |
| CVE-2026-108162 | MEDIUM | 6.5 | 0.2% | Oct 10, 2026 | Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to... |
| CVE-2026-108161 | HIGH | 7.5 | 1.1% | Oct 10, 2026 | FusionPBX through 5.6.5 contains an OS command injection vulnerability in call_recordings::download() that allows unauth... |
| CVE-2026-105885 | HIGH | 8.8 | 0.3% | Oct 10, 2026 | Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue af... |
| CVE-2026-102388 | HIGH | 7.1 | 0.1% | Oct 10, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Forminato... |