CVE Vulnerability Database
Search and browse 425,062 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105638 | CRITICAL | 9.1 | — | Oct 5, 2026 | Plane is an open-source project management tool. Prior to 1.4.0, Plane's magic-code email login uses a six-digit numeric... |
| CVE-2026-105637 | CRITICAL | 9.6 | — | Oct 5, 2026 | Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/vie... |
| CVE-2026-105636 | CRITICAL | 9.9 | 0.4% | Oct 5, 2026 | Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/web... |
| CVE-2026-105635 | HIGH | 7.4 | — | Oct 5, 2026 | Plane is an open-source project management tool. Prior to 1.4.0, ProjectJoinEndpoint at GET /api/workspaces/{slug}/proje... |
| CVE-2026-105634 | HIGH | 8.1 | 0.3% | Oct 5, 2026 | Plane is an open-source project management tool. Prior to 1.3.0, the ProjectMemberViewSet.partial_update method allows a... |
| CVE-2026-105387 | HIGH | 7.3 | 0.3% | Oct 5, 2026 | A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87b... |
| CVE-2026-105386 | HIGH | 7.3 | 0.3% | Oct 5, 2026 | A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61... |
| CVE-2026-105326 | LOW | 2.5 | 0.2% | Oct 5, 2026 | An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer ... |
| CVE-2026-104714 | HIGH | 8.8 | 0.5% | Oct 5, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Stru... |
| CVE-2026-104713 | MEDIUM | 6.5 | 0.4% | Oct 5, 2026 | Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is r... |
| CVE-2026-104712 | HIGH | 7.5 | 0.6% | Oct 5, 2026 | Asymmetric resource consumption (amplification) vulnerability in Apache Struts. When a request parameter is bound to an ... |
| CVE-2026-104711 | CRITICAL | 9.8 | 0.9% | Oct 5, 2026 | Improper neutralization of special elements used in an expression language statement ('Expression Language Injection') v... |
| CVE-2026-103352 | CRITICAL | 9.3 | 0.2% | Oct 5, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Bo... |
| CVE-2026-103349 | HIGH | 7.2 | 0.4% | Oct 5, 2026 | Deserialization of Untrusted Data vulnerability in Rymera Web Co Product Feed PRO for WooCommerce woo-product-feed-pro a... |
| CVE-2026-103334 | HIGH | 7.5 | 0.3% | Oct 5, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant R... |
| CVE-2026-103086 | MEDIUM | 6.5 | 0.2% | Oct 5, 2026 | Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control S... |
| CVE-2026-103085 | MEDIUM | 6.5 | 0.2% | Oct 5, 2026 | Improper Access Control vulnerability in WP User Manager WP User Manager wp-user-manager allows Privilege Abuse.This iss... |
| CVE-2026-102383 | MEDIUM | 6.5 | 0.3% | Oct 5, 2026 | Missing Authorization vulnerability in VillaTheme Lookzy woo-lookbook allows Exploiting Incorrectly Configured Access Co... |
| CVE-2026-100515 | HIGH | 7.1 | 0.2% | Oct 5, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Photo R... |
| CVE-2026-100509 | MEDIUM | 6.5 | 0.2% | Oct 5, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webful Creations R... |
| CVE-2026-93323 | MEDIUM | 6.8 | 0.1% | Oct 5, 2026 | The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limi... |
| CVE-2026-93322 | MEDIUM | 6.9 | 0.1% | Oct 5, 2026 | A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds ... |
| CVE-2026-93320 | MEDIUM | 6 | 0.1% | Oct 5, 2026 | BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special ... |
| CVE-2026-93319 | MEDIUM | 5.7 | 0.1% | Oct 5, 2026 | A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data ra... |
| CVE-2026-93318 | HIGH | 7.5 | 0.2% | Oct 5, 2026 | A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versio... |