CVE Vulnerability Database
Search and browse 424,993 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-55797 | HIGH | 8.8 | — | Oct 9, 2026 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3... |
| CVE-2026-48484 | MEDIUM | 6.5 | 0.3% | Oct 9, 2026 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the API `rpc` function in ... |
| CVE-2026-42695 | MEDIUM | 6.5 | 0.1% | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Flo... |
| CVE-2026-108160 | HIGH | 7.5 | — | Oct 9, 2026 | AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers ... |
| CVE-2026-108159 | HIGH | 7.5 | 0.3% | Oct 9, 2026 | AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that ... |
| CVE-2026-108158 | MEDIUM | 6.5 | 0.3% | Oct 9, 2026 | plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows... |
| CVE-2026-108157 | HIGH | 8.1 | — | Oct 9, 2026 | Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthent... |
| CVE-2026-108156 | HIGH | 7.1 | 0.1% | Oct 9, 2026 | LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC h... |
| CVE-2026-108119 | MEDIUM | 6.3 | 0.1% | Oct 9, 2026 | A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsa... |
| CVE-2026-108093 | MEDIUM | 5.5 | 0.1% | Oct 9, 2026 | A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without en... |
| CVE-2026-107815 | HIGH | 8.5 | 0.6% | Oct 9, 2026 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3... |
| CVE-2025-61560 | HIGH | 8.1 | 0.3% | Oct 9, 2026 | A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows at... |
| CVE-2016-20098 | MEDIUM | 5.4 | — | Oct 9, 2026 | Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14 contains a stored cross-site scripting vulnerability in the r... |
| CVE-2026-90983 | HIGH | 8.2 | — | Oct 9, 2026 | Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile allows Aut... |
| CVE-2026-75349 | HIGH | 7.5 | 0.5% | Oct 9, 2026 | EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manag... |
| CVE-2026-75348 | HIGH | 7.5 | — | Oct 9, 2026 | An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/... |
| CVE-2026-75346 | HIGH | 7.5 | — | Oct 9, 2026 | An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-... |
| CVE-2026-75345 | HIGH | 7.5 | 0.5% | Oct 9, 2026 | OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path. This allows a ... |
| CVE-2026-108113 | HIGH | 8.8 | 0.6% | Oct 9, 2026 | ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handl... |
| CVE-2026-108112 | MEDIUM | 5.4 | 0.2% | Oct 9, 2026 | ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability that allows authenticated users to delete ot... |
| CVE-2026-108111 | MEDIUM | 4.3 | 0.2% | Oct 9, 2026 | ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that ex... |
| CVE-2026-108110 | MEDIUM | 6.8 | 0.2% | Oct 9, 2026 | MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authent... |
| CVE-2026-107814 | HIGH | 8.4 | 0.3% | Oct 9, 2026 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3... |
| CVE-2026-107813 | HIGH | 8.8 | 0.3% | Oct 9, 2026 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node a... |
| CVE-2026-107812 | HIGH | 7.5 | 0.2% | Oct 9, 2026 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the self-upgrade mechanism validates ... |