CVE Vulnerability Database
Search and browse 425,024 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105840 | HIGH | 7.5 | 0.3% | Oct 6, 2026 | lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows mal... |
| CVE-2026-105839 | HIGH | 7.8 | — | Oct 6, 2026 | libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT_doPBOD() that allows attackers to cause... |
| CVE-2026-105838 | MEDIUM | 5.5 | — | Oct 6, 2026 | libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader load_it.c that al... |
| CVE-2026-105837 | HIGH | 7.8 | — | Oct 6, 2026 | libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to ... |
| CVE-2026-105790 | MEDIUM | 6.4 | — | Oct 6, 2026 | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authe... |
| CVE-2026-105789 | MEDIUM | 5.4 | — | Oct 6, 2026 | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the e... |
| CVE-2026-105788 | HIGH | 8.8 | — | Oct 6, 2026 | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the ... |
| CVE-2025-15591 | MEDIUM | 5.3 | 0.3% | Oct 6, 2026 | Cross-site Scripting (XSS) in the Forums feature of OpenText Content Management Content Server could allow a bad actor t... |
| CVE-2026-82531 | HIGH | 8.1 | — | Oct 6, 2026 | Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocache_hash is nev... |
| CVE-2026-106016 | CRITICAL | 9.8 | 0.3% | Oct 6, 2026 | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158. |
| CVE-2026-105919 | HIGH | 7.3 | — | Oct 6, 2026 | A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The... |
| CVE-2026-105836 | MEDIUM | 5.4 | 0.2% | Oct 6, 2026 | QloApps through 1.7.0 contains an authorization bypass vulnerability in AdminProductsController::ajaxProcessBulkUpdateRo... |
| CVE-2026-105835 | HIGH | 7.4 | 0.3% | Oct 6, 2026 | PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitted to POST /api/access-tokens/verify-totp, allowin... |
| CVE-2026-105834 | MEDIUM | 6.5 | — | Oct 6, 2026 | Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to... |
| CVE-2026-56596 | LOW | 3.5 | — | Oct 6, 2026 | HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker t... |
| CVE-2026-105918 | HIGH | 7.3 | — | Oct 6, 2026 | A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2... |
| CVE-2026-75820 | LOW | 1.8 | — | Oct 6, 2026 | GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in modules/speller/default/w... |
| CVE-2026-75819 | LOW | 1.8 | — | Oct 6, 2026 | GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load() in readonly_ws.cpp. When loading a binar... |
| CVE-2026-75818 | LOW | 1.8 | — | Oct 6, 2026 | GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The deco... |
| CVE-2026-105985 | HIGH | 8.8 | — | Oct 6, 2026 | Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render... |
| CVE-2026-103831 | HIGH | 7.5 | — | Oct 6, 2026 | CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Pl... |
| CVE-2026-84854 | HIGH | 7 | 0.1% | Oct 6, 2026 | In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of... |
| CVE-2026-80327 | MEDIUM | 5.1 | 0.5% | Oct 6, 2026 | An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway version... |
| CVE-2026-98372 | — | — | 0.2% | Oct 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_... |
| CVE-2026-98371 | — | — | 0.2% | Oct 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix runt reassembly panic from short i... |