CVE Vulnerability Database
Search and browse 425,062 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105688 | MEDIUM | 6.7 | — | Oct 5, 2026 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, create-team-invitations and the invitation ac... |
| CVE-2026-105687 | MEDIUM | 4.9 | 0.3% | Oct 5, 2026 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-team-member RPC allows a team admi... |
| CVE-2026-105686 | MEDIUM | 5.3 | 0.3% | Oct 5, 2026 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the chunked media upload RPC validates that a... |
| CVE-2026-105684 | MEDIUM | 4.3 | — | Oct 5, 2026 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-comment-threads, get-comment-thread, ... |
| CVE-2026-105683 | LOW | 3.8 | 0.3% | Oct 5, 2026 | Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff... |
| CVE-2026-105682 | LOW | 2.7 | 0.2% | Oct 5, 2026 | Ghost is a Node.js content management system. From 1.18.0 until 6.27.0, an SSRF vulnerability in the webhooks feature al... |
| CVE-2026-105681 | MEDIUM | 6.5 | 0.3% | Oct 5, 2026 | Ghost is a Node.js content management system. From 5.9.0 until 6.44.1, an input validation issue allowed members to acce... |
| CVE-2026-105680 | MEDIUM | 6.5 | 0.3% | Oct 5, 2026 | Ghost is a Node.js content management system. From 5.81.0 until 6.60.0, staff with the Author role could delete posts an... |
| CVE-2026-105679 | HIGH | 7.3 | 0.2% | Oct 5, 2026 | Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve ... |
| CVE-2026-105678 | MEDIUM | 4.3 | 0.2% | Oct 5, 2026 | Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role ... |
| CVE-2026-105677 | HIGH | 7.2 | 0.5% | Oct 5, 2026 | Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme transla... |
| CVE-2026-105676 | MEDIUM | 4.9 | 0.4% | Oct 5, 2026 | Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme transla... |
| CVE-2026-105675 | HIGH | 7.5 | 0.4% | Oct 5, 2026 | Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invite... |
| CVE-2026-105652 | LOW | 3.1 | 0.3% | Oct 5, 2026 | Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determine the re... |
| CVE-2026-105651 | HIGH | 7.3 | 0.3% | Oct 5, 2026 | Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store... |
| CVE-2026-105650 | HIGH | 8.1 | 0.3% | Oct 5, 2026 | Ghost is a Node.js content management system. From 2.1.0 until 6.64.0, embedding a URL from an attacker-controlled websi... |
| CVE-2026-105649 | HIGH | 7.3 | 0.3% | Oct 5, 2026 | Ghost is a Node.js content management system. From 4.22.0 until 6.65.0, SVG media thumbnails and SVG images uploaded wit... |
| CVE-2026-105648 | MEDIUM | 4 | 0.3% | Oct 5, 2026 | Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, a validation issue allowed some functionality, su... |
| CVE-2026-105647 | MEDIUM | 4 | 0.2% | Oct 5, 2026 | Ghost is a Node.js content management system. From 6.54.1 until 6.65.0, a validation issue allowed some functionality, s... |
| CVE-2026-105392 | HIGH | 7.3 | 0.3% | Oct 5, 2026 | A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown function of ... |
| CVE-2026-105389 | MEDIUM | 6.3 | 0.2% | Oct 5, 2026 | A security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0. This issue affects some unknown processing ... |
| CVE-2026-105388 | MEDIUM | 6.3 | 0.3% | Oct 5, 2026 | A weakness has been identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function index of the fi... |
| CVE-2026-104030 | MEDIUM | 5.5 | 0.1% | Oct 5, 2026 | A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a spec... |
| CVE-2026-104029 | MEDIUM | 5.5 | 0.1% | Oct 5, 2026 | A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the ... |
| CVE-2026-103348 | HIGH | 7.2 | 0.4% | Oct 5, 2026 | Deserialization of Untrusted Data vulnerability in Smackcoders Inc. WP Ultimate Exporter wp-ultimate-exporter allows Obj... |