CVE Vulnerability Database
Search and browse 425,002 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-87682 | HIGH | 8.8 | 0.9% | Oct 8, 2026 | Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Broca... |
| CVE-2026-82627 | HIGH | 7.5 | 0.3% | Oct 8, 2026 | The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for Wor... |
| CVE-2026-102488 | HIGH | 8.7 | 0.2% | Oct 8, 2026 | In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly pri... |
| CVE-2026-87681 | MEDIUM | 6.3 | 0.2% | Oct 8, 2026 | An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabri... |
| CVE-2026-87680 | HIGH | 8.8 | 1.0% | Oct 8, 2026 | A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allow... |
| CVE-2026-87679 | HIGH | 7.2 | 0.2% | Oct 8, 2026 | When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supp... |
| CVE-2024-8122 | MEDIUM | 5.9 | 0.3% | Oct 8, 2026 | The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor a... |
| CVE-2026-94154 | MEDIUM | 6.1 | 0.2% | Oct 8, 2026 | The Aurora Heatmap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all vers... |
| CVE-2026-17538 | MEDIUM | 5.4 | 0.2% | Oct 8, 2026 | The LatePoint - Appointment Booking & Reservation plugin for WordPress is vulnerable to Insecure Direct Object Reference... |
| CVE-2026-107315 | MEDIUM | 5.3 | 0.1% | Oct 8, 2026 | pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared lengt... |
| CVE-2026-97664 | — | — | — | Oct 7, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-89322 | HIGH | 7.2 | 0.3% | Oct 7, 2026 | Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form of resource and policy ... |
| CVE-2026-107314 | MEDIUM | 5.9 | 0.3% | Oct 7, 2026 | pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 enforce no restriction when the requireAuth connect... |
| CVE-2026-107285 | MEDIUM | 5.9 | 0.2% | Oct 7, 2026 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT... |
| CVE-2026-107284 | LOW | 3.7 | 0.1% | Oct 7, 2026 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT... |
| CVE-2026-107283 | LOW | 3.7 | 0.3% | Oct 7, 2026 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT... |
| CVE-2026-107282 | CRITICAL | 9.4 | 0.2% | Oct 7, 2026 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT... |
| CVE-2026-107281 | HIGH | 7.6 | 0.2% | Oct 7, 2026 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT... |
| CVE-2026-107280 | MEDIUM | 6.9 | 0.3% | Oct 7, 2026 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT... |
| CVE-2026-107279 | HIGH | 8.8 | 0.4% | Oct 7, 2026 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT... |
| CVE-2026-107232 | HIGH | 7.5 | 0.2% | Oct 7, 2026 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT... |
| CVE-2026-107231 | HIGH | 8.7 | 0.2% | Oct 7, 2026 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT... |
| CVE-2026-107230 | HIGH | 7.4 | 0.2% | Oct 7, 2026 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT... |
| CVE-2026-105820 | MEDIUM | 5.4 | 0.2% | Oct 7, 2026 | Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may all... |
| CVE-2026-105818 | MEDIUM | 5.9 | 0.1% | Oct 7, 2026 | Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when... |