CVE Vulnerability Database
Search and browse 425,064 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-103079 | MEDIUM | 5.4 | 0.2% | Oct 5, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting... |
| CVE-2026-103078 | MEDIUM | 4.3 | 0.2% | Oct 5, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting... |
| CVE-2026-102914 | MEDIUM | 6.5 | 0.2% | Oct 5, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force P... |
| CVE-2026-102393 | MEDIUM | 6.5 | 0.2% | Oct 5, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S... |
| CVE-2026-100103 | CRITICAL | 10 | 0.4% | Oct 5, 2026 | Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented de... |
| CVE-2026-100102 | CRITICAL | 9.5 | 0.4% | Oct 5, 2026 | Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with n... |
| CVE-2026-105314 | HIGH | 7.5 | 0.9% | Oct 5, 2026 | Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call... |
| CVE-2026-105250 | MEDIUM | 4.3 | 0.3% | Oct 5, 2026 | A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decode_ms_ima of the file ... |
| CVE-2026-105249 | MEDIUM | 4.8 | 0.1% | Oct 5, 2026 | A weakness has been identified in vgmstream up to r2117. This impacts the function make_group_random of the file src/met... |
| CVE-2026-105248 | MEDIUM | 6.3 | 0.2% | Oct 5, 2026 | A security flaw has been discovered in vgmstream up to r2117. This affects the function parse_params/txtp_parse of the f... |
| CVE-2026-105247 | HIGH | 7.3 | 0.3% | Oct 5, 2026 | A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unkno... |
| CVE-2026-19954 | MEDIUM | 5.4 | 0.2% | Oct 5, 2026 | Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain... |
| CVE-2026-105246 | HIGH | 7.3 | 0.3% | Oct 5, 2026 | A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of th... |
| CVE-2026-105245 | LOW | 3.7 | 0.2% | Oct 5, 2026 | A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function server_info of the fi... |
| CVE-2026-105238 | HIGH | 7.3 | 0.4% | Oct 5, 2026 | A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of t... |
| CVE-2026-100727 | MEDIUM | 6.9 | 0.2% | Oct 5, 2026 | An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files containe... |
| CVE-2019-25777 | HIGH | 7.3 | 0.2% | Oct 5, 2026 | YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead... |
| CVE-2017-20285 | CRITICAL | 9.1 | 0.2% | Oct 5, 2026 | YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/h... |
| CVE-2026-84169 | MEDIUM | 5.3 | 0.2% | Oct 5, 2026 | The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actua... |
| CVE-2026-78371 | MEDIUM | 5.9 | 0.2% | Oct 5, 2026 | The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that the person requesting a custom... |
| CVE-2026-13607 | MEDIUM | 5.9 | 0.3% | Oct 5, 2026 | The File Uploads Addon for WooCommerce WordPress plugin through 1.7.6 stores customer-uploaded files in a publicly web-a... |
| CVE-2026-105306 | MEDIUM | 6.5 | 0.2% | Oct 5, 2026 | A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server. The issu... |
| CVE-2026-105302 | MEDIUM | 5.7 | 0.2% | Oct 5, 2026 | A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occu... |
| CVE-2026-105301 | — | — | 0.1% | Oct 5, 2026 | Rejected reason: This candidate was rejected after further investigation determined that it is not a security vulnerabil... |
| CVE-2026-105237 | LOW | 3.7 | 0.4% | Oct 5, 2026 | A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin... |