CVE Vulnerability Database
Search and browse 424,998 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-94067 | HIGH | 8.1 | — | Oct 9, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-94066 | HIGH | 7.1 | — | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SpabRice Pond pond... |
| CVE-2026-94065 | HIGH | 8.8 | 0.3% | Oct 9, 2026 | Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio colorit allows Object Injection.This issue af... |
| CVE-2026-94064 | HIGH | 8.8 | 0.3% | Oct 9, 2026 | Deserialization of Untrusted Data vulnerability in BuddhaThemes Neo | Barber Shop WordPress Theme neocut allows Object I... |
| CVE-2026-94063 | HIGH | 7.1 | — | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Education... |
| CVE-2026-92085 | MEDIUM | 5.4 | — | Oct 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TMT Machinery Indu... |
| CVE-2026-85479 | MEDIUM | 5.3 | 0.3% | Oct 9, 2026 | The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration... |
| CVE-2026-79363 | MEDIUM | 5.9 | — | Oct 9, 2026 | Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting (XSS) vulnerability in the Branding Footer feature. An auth... |
| CVE-2026-62026 | HIGH | 7.1 | — | Oct 9, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in MIGHTYminnow Dashboard Notes dashboard-notes allows Cross Site Reques... |
| CVE-2026-108063 | MEDIUM | 5.5 | 0.1% | Oct 9, 2026 | A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a... |
| CVE-2026-107803 | MEDIUM | 6.5 | — | Oct 9, 2026 | ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the `GET /api/1.0/tasks` endpoint... |
| CVE-2026-107785 | MEDIUM | 6.3 | — | Oct 9, 2026 | Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering sessi... |
| CVE-2026-106581 | HIGH | 7.3 | — | Oct 9, 2026 | Before 4.92.0, Docker Desktop for Windows did not verify the signature of a package supplied to Docker Desktop Installer... |
| CVE-2026-105281 | HIGH | 7.5 | 0.3% | Oct 9, 2026 | The internal data publisher on openPDC accepts network connections without authentication in its default configuration. ... |
| CVE-2026-104629 | HIGH | 8.8 | — | Oct 9, 2026 | A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an in... |
| CVE-2026-101022 | MEDIUM | 4.3 | — | Oct 9, 2026 | A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on wh... |
| CVE-2026-100730 | CRITICAL | 9.8 | 0.6% | Oct 9, 2026 | A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using... |
| CVE-2026-96396 | MEDIUM | 4.9 | — | Oct 9, 2026 | The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an ... |
| CVE-2026-96395 | LOW | 3.6 | — | Oct 9, 2026 | The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when ge... |
| CVE-2026-96394 | LOW | 2.9 | — | Oct 9, 2026 | The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions agains... |
| CVE-2026-96393 | LOW | 3.6 | — | Oct 9, 2026 | The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affi... |
| CVE-2026-94062 | HIGH | 8.1 | — | Oct 9, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-94061 | HIGH | 7.1 | 0.1% | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designthemes Whist... |
| CVE-2026-94060 | HIGH | 7.1 | 0.1% | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Voldor ... |
| CVE-2026-94059 | HIGH | 7.1 | — | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Ogency ... |