CVE Vulnerability Database
Search and browse 424,998 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108111 | MEDIUM | 4.3 | 0.2% | Oct 9, 2026 | ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that ex... |
| CVE-2026-108110 | MEDIUM | 6.8 | 0.2% | Oct 9, 2026 | MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authent... |
| CVE-2026-107814 | HIGH | 8.4 | 0.3% | Oct 9, 2026 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3... |
| CVE-2026-107813 | HIGH | 8.8 | 0.3% | Oct 9, 2026 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node a... |
| CVE-2026-107812 | HIGH | 7.5 | 0.2% | Oct 9, 2026 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the self-upgrade mechanism validates ... |
| CVE-2026-107811 | HIGH | 8.8 | 0.4% | Oct 9, 2026 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, ordinary authenticated users can acce... |
| CVE-2026-107810 | HIGH | 8.1 | 0.4% | Oct 9, 2026 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, internal/backup/restore.go extracts i... |
| CVE-2026-107809 | HIGH | 8.8 | 0.2% | Oct 9, 2026 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-manage... |
| CVE-2026-107808 | HIGH | 8.1 | 0.4% | Oct 9, 2026 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, POST /api/login checks EnabledOTP but... |
| CVE-2026-107807 | HIGH | 8.8 | 0.3% | Oct 9, 2026 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, Nginx UI accepts the Node.Secret mast... |
| CVE-2026-107783 | MEDIUM | 5.9 | — | Oct 9, 2026 | Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to r... |
| CVE-2026-104084 | HIGH | 8.8 | 0.2% | Oct 9, 2026 | SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a ... |
| CVE-2026-104083 | MEDIUM | 6.1 | 0.3% | Oct 9, 2026 | SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that allows remote attackers... |
| CVE-2026-104082 | HIGH | 7.2 | 0.6% | Oct 9, 2026 | SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-... |
| CVE-2026-102554 | HIGH | 8.2 | — | Oct 9, 2026 | Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versio... |
| CVE-2026-95702 | HIGH | 8.5 | 0.1% | Oct 9, 2026 | Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacke... |
| CVE-2026-78796 | CRITICAL | 9.8 | 0.2% | Oct 9, 2026 | An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a... |
| CVE-2026-78795 | HIGH | 7.5 | — | Oct 9, 2026 | An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a... |
| CVE-2026-39460 | HIGH | 8.1 | 0.3% | Oct 9, 2026 | Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration fil... |
| CVE-2026-39453 | HIGH | 8.3 | 0.3% | Oct 9, 2026 | Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool l... |
| CVE-2026-33367 | HIGH | 8.1 | 0.3% | Oct 9, 2026 | SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or de... |
| CVE-2026-33272 | MEDIUM | 4.9 | 0.1% | Oct 9, 2026 | A malicious user with physical access to the device can boot the switch from factory settings without authentication, us... |
| CVE-2026-32645 | MEDIUM | 6 | 0.1% | Oct 9, 2026 | Default factory credentials with administrative access are enabled and persist even after configuring other administrato... |
| CVE-2026-29797 | HIGH | 7.1 | 0.2% | Oct 9, 2026 | No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to t... |
| CVE-2026-28745 | HIGH | 7.5 | 0.2% | Oct 9, 2026 | Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. ... |