CVE Vulnerability Database
Search and browse 425,062 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105288 | MEDIUM | 4.3 | 0.4% | Oct 5, 2026 | A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexCon... |
| CVE-2026-105287 | MEDIUM | 6.3 | 0.3% | Oct 5, 2026 | A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Cont... |
| CVE-2026-105286 | MEDIUM | 6.3 | 0.4% | Oct 5, 2026 | A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub_44B250 of the file ... |
| CVE-2026-105285 | CRITICAL | 10 | 0.6% | Oct 5, 2026 | A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of... |
| CVE-2026-97071 | MEDIUM | 5.3 | 0.2% | Oct 5, 2026 | Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CUR... |
| CVE-2026-39721 | MEDIUM | 5.4 | 0.2% | Oct 5, 2026 | Missing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Conf... |
| CVE-2026-19185 | HIGH | 7.8 | 0.2% | Oct 5, 2026 | The system-call verifier for i3c_do_ccc() in drivers/i3c/i3c_handlers.c validated the outer struct i3c_ccc_payload, the ... |
| CVE-2026-19184 | HIGH | 8.4 | 0.1% | Oct 5, 2026 | The NXP GAU ADC driver (drivers/adc/adc_mcux_gau_adc.c) validated the caller-supplied sequence->buffer_size, which is ex... |
| CVE-2026-105284 | CRITICAL | 10 | 0.8% | Oct 5, 2026 | A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC... |
| CVE-2026-105263 | MEDIUM | 4.7 | — | Oct 5, 2026 | A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of ... |
| CVE-2026-105254 | MEDIUM | 6.3 | 0.2% | Oct 5, 2026 | A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file ... |
| CVE-2026-105253 | HIGH | 7.3 | 0.3% | Oct 5, 2026 | A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown proc... |
| CVE-2026-105251 | MEDIUM | 6.3 | 0.2% | Oct 5, 2026 | A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function ps_find_padding of... |
| CVE-2026-105069 | MEDIUM | 6.5 | 0.1% | Oct 5, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikki Blight QR Re... |
| CVE-2026-105068 | MEDIUM | 5.3 | 0.2% | Oct 5, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in Pixelite Events Manager events-manager allows Retriev... |
| CVE-2026-105064 | MEDIUM | 6.5 | 0.2% | Oct 5, 2026 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Unlimited Elements U... |
| CVE-2026-105062 | MEDIUM | 4.3 | 0.2% | Oct 5, 2026 | Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured ... |
| CVE-2026-105060 | MEDIUM | 6.5 | 0.1% | Oct 5, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Logo S... |
| CVE-2026-105056 | MEDIUM | 6.5 | 0.1% | Oct 5, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerc... |
| CVE-2026-105055 | MEDIUM | 5.3 | 0.2% | Oct 5, 2026 | Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Acce... |
| CVE-2026-104811 | HIGH | 8.4 | 0.2% | Oct 5, 2026 | DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected insta... |
| CVE-2026-104810 | HIGH | 8.4 | 0.4% | Oct 5, 2026 | This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office... |
| CVE-2026-104809 | HIGH | 8.4 | 0.1% | Oct 5, 2026 | DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled ... |
| CVE-2026-104808 | LOW | 1.9 | 0.2% | Oct 5, 2026 | DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious us... |
| CVE-2026-104807 | LOW | 1.9 | 0.2% | Oct 5, 2026 | DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious us... |