CVE Vulnerability Database
Search and browse 425,002 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-71183 | HIGH | 7.1 | 0.1% | Oct 8, 2026 | An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data so... |
| CVE-2026-66087 | HIGH | 8.1 | 0.2% | Oct 8, 2026 | An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance in ... |
| CVE-2026-66084 | HIGH | 8.1 | 0.2% | Oct 8, 2026 | An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to modify task definitions i... |
| CVE-2026-66082 | MEDIUM | 6.5 | 0.2% | Oct 8, 2026 | An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to perform unauthorized oper... |
| CVE-2026-4894 | MEDIUM | 6.9 | 0.4% | Oct 8, 2026 | A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process... |
| CVE-2026-12260 | CRITICAL | 10 | 0.2% | Oct 8, 2026 | SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST paramete... |
| CVE-2026-105110 | CRITICAL | 9.8 | 2.8% | Oct 8, 2026 | OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenticated remote ... |
| CVE-2026-93699 | HIGH | 8.5 | 0.1% | Oct 8, 2026 | Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same s... |
| CVE-2026-107466 | MEDIUM | 6.1 | 0.2% | Oct 8, 2026 | A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause information disclosure by convincing... |
| CVE-2026-87428 | HIGH | 7.8 | 0.1% | Oct 8, 2026 | In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host netwo... |
| CVE-2026-87426 | MEDIUM | 4.3 | 0.2% | Oct 8, 2026 | An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions befo... |
| CVE-2026-87425 | MEDIUM | 6.8 | 0.1% | Oct 8, 2026 | An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By suppl... |
| CVE-2026-87424 | HIGH | 8.8 | 0.2% | Oct 8, 2026 | A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attack... |
| CVE-2026-85490 | HIGH | 8.8 | 0.3% | Oct 8, 2026 | When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the applica... |
| CVE-2026-85489 | HIGH | 8.8 | 0.2% | Oct 8, 2026 | An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated networ... |
| CVE-2026-85488 | HIGH | 7.8 | 0.1% | Oct 8, 2026 | Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. ... |
| CVE-2026-85487 | HIGH | 8.8 | 0.2% | Oct 8, 2026 | A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenti... |
| CVE-2026-85486 | HIGH | 8 | 0.2% | Oct 8, 2026 | Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authentic... |
| CVE-2026-85423 | HIGH | 8.8 | 0.2% | Oct 8, 2026 | A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoin... |
| CVE-2026-85422 | HIGH | 7.8 | 0.1% | Oct 8, 2026 | A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardco... |
| CVE-2026-85421 | HIGH | 8.8 | 0.2% | Oct 8, 2026 | A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to ... |
| CVE-2026-85097 | CRITICAL | 9.8 | 0.3% | Oct 8, 2026 | The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and inclu... |
| CVE-2026-94275 | MEDIUM | 5.3 | 0.1% | Oct 8, 2026 | The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an order before returning i... |
| CVE-2026-94258 | LOW | 2.7 | 0.1% | Oct 8, 2026 | The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selec... |
| CVE-2026-94246 | MEDIUM | 6.3 | 0.1% | Oct 8, 2026 | The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the wallet account named in a with... |