CVE Vulnerability Database
Search and browse 424,998 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105832 | MEDIUM | 4.3 | — | Oct 8, 2026 | EspoCRM before 10.0.6 contains an authentication bypass vulnerability that accepts a login stopped at the second factor ... |
| CVE-2026-105831 | MEDIUM | 4.3 | — | Oct 8, 2026 | EspoCRM before 10.0.6 contains a stored HTML injection vulnerability that allows unauthenticated attackers to inject HTM... |
| CVE-2026-105830 | HIGH | 7.5 | — | Oct 8, 2026 | league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavo... |
| CVE-2026-105829 | MEDIUM | 6.1 | 0.2% | Oct 8, 2026 | League CommonMark from 1.3.0 before 2.10.2 contains a cross-site scripting vulnerability that allows users posting Markd... |
| CVE-2026-105828 | MEDIUM | 6.3 | — | Oct 8, 2026 | Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in wh... |
| CVE-2026-105827 | — | — | — | Oct 8, 2026 | Rejected reason: This CVE ID has been rejected as a duplicate. |
| CVE-2026-105826 | — | — | — | Oct 8, 2026 | Rejected reason: This CVE ID has been rejected as a duplicate. |
| CVE-2026-105825 | — | — | — | Oct 8, 2026 | Rejected reason: This CVE ID has been rejected as a duplicate. |
| CVE-2026-105824 | — | — | — | Oct 8, 2026 | Rejected reason: This CVE ID has been rejected as a duplicate. |
| CVE-2026-105823 | — | — | — | Oct 8, 2026 | Rejected reason: This CVE ID has been rejected as a duplicate. |
| CVE-2026-105405 | — | — | — | Oct 8, 2026 | Rejected reason: This CVE ID has been rejected as a duplicate. |
| CVE-2026-105404 | — | — | — | Oct 8, 2026 | Rejected reason: This CVE ID has been rejected as a duplicate. |
| CVE-2026-105403 | — | — | — | Oct 8, 2026 | Rejected reason: This CVE ID has been rejected as a duplicate. |
| CVE-2026-105402 | — | — | — | Oct 8, 2026 | Rejected reason: This CVE ID has been rejected as a duplicate. |
| CVE-2026-105401 | — | — | — | Oct 8, 2026 | Rejected reason: This CVE ID has been rejected as a duplicate. |
| CVE-2026-105400 | — | — | — | Oct 8, 2026 | Rejected reason: This CVE ID has been rejected as a duplicate. |
| CVE-2026-105399 | — | — | — | Oct 8, 2026 | Rejected reason: This CVE ID has been rejected as a duplicate. |
| CVE-2026-105398 | — | — | — | Oct 8, 2026 | Rejected reason: This CVE ID has been rejected as a duplicate. |
| CVE-2026-105331 | MEDIUM | 5.2 | — | Oct 8, 2026 | Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client ... |
| CVE-2026-91844 | HIGH | 7.3 | — | Oct 8, 2026 | Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd... |
| CVE-2026-89290 | LOW | 3.5 | — | Oct 8, 2026 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Services Dome... |
| CVE-2026-88257 | MEDIUM | 5.3 | — | Oct 8, 2026 | Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam_mcp allows an MCP client to reach a tool... |
| CVE-2026-42698 | MEDIUM | 5.3 | — | Oct 8, 2026 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum Tut... |
| CVE-2026-27420 | MEDIUM | 6.5 | — | Oct 8, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Katie Seaborn Zotp... |
| CVE-2026-16167 | HIGH | 7.5 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |