CVE Vulnerability Database
Search and browse 425,062 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-77802 | MEDIUM | 6.3 | 0.1% | Oct 5, 2026 | In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, HTTP request smuggling is possib... |
| CVE-2026-105315 | MEDIUM | 4.7 | 0.3% | Oct 5, 2026 | A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function _to_python of the file haystack/... |
| CVE-2026-63277 | HIGH | 8.5 | 0.1% | Oct 5, 2026 | LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document cou... |
| CVE-2026-63270 | MEDIUM | 6.7 | 0.1% | Oct 5, 2026 | URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information c... |
| CVE-2026-63269 | MEDIUM | 6.7 | 0.1% | Oct 5, 2026 | LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media... |
| CVE-2026-63268 | MEDIUM | 6.7 | 0.1% | Oct 5, 2026 | LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the ... |
| CVE-2026-63267 | MEDIUM | 6.7 | 0.1% | Oct 5, 2026 | LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a lin... |
| CVE-2026-63266 | MEDIUM | 6.8 | 0.2% | Oct 5, 2026 | LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a... |
| CVE-2026-39783 | MEDIUM | 4.3 | 0.2% | Oct 5, 2026 | Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Retrieve Embedded Sensitive Data.This issue af... |
| CVE-2026-105396 | MEDIUM | 5.4 | — | Oct 5, 2026 | Heym before v0.0.112 contains a token leakage vulnerability in build_public_base_url() that allows unauthenticated attac... |
| CVE-2026-105307 | HIGH | 7.3 | — | Oct 5, 2026 | A vulnerability was detected in Casdoor up to 3.161.1. Affected is the function ApiFilter of the file routers/authz_filt... |
| CVE-2026-105073 | MEDIUM | 5.3 | 0.2% | Oct 5, 2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution ... |
| CVE-2026-103684 | MEDIUM | 5.3 | 0.2% | Oct 5, 2026 | Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Confi... |
| CVE-2026-94669 | MEDIUM | 5.3 | 0.2% | Oct 5, 2026 | Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms Pro Add On Pack fluentformpro allows Exploiting I... |
| CVE-2026-59788 | MEDIUM | 5.7 | 0.3% | Oct 5, 2026 | The email media type OAuth form passes the Authorization endpoint value to window.open() without validating the URL sche... |
| CVE-2026-59787 | MEDIUM | 5.3 | 0.2% | Oct 5, 2026 | The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap... |
| CVE-2026-59786 | MEDIUM | 6.9 | 0.2% | Oct 5, 2026 | Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authen... |
| CVE-2026-59785 | MEDIUM | 5.1 | 0.2% | Oct 5, 2026 | Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A ... |
| CVE-2026-59783 | LOW | 2.3 | 0.2% | Oct 5, 2026 | The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input lea... |
| CVE-2026-59782 | MEDIUM | 6.9 | 0.2% | Oct 5, 2026 | The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able... |
| CVE-2026-39763 | MEDIUM | 4.3 | 0.2% | Oct 5, 2026 | Missing Authorization vulnerability in Deepak Anand WP Dummy Content Generator wp-dummy-content-generator allows Exploit... |
| CVE-2026-105291 | MEDIUM | 4.3 | 0.4% | Oct 5, 2026 | A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController... |
| CVE-2026-105290 | HIGH | 7.3 | 0.5% | Oct 5, 2026 | A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/In... |
| CVE-2026-105289 | LOW | 3.5 | 0.3% | Oct 5, 2026 | A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialchars_deco... |
| CVE-2026-19395 | MEDIUM | 6.6 | 0.3% | Oct 5, 2026 | In Qt for MCUs, a Text element that displays styled text halts the device if an <img> tag in the text contains an attrib... |