CVE Vulnerability Database
Search and browse 425,064 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105176 | MEDIUM | 4.7 | 0.3% | Oct 5, 2026 | A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the ... |
| CVE-2026-105295 | HIGH | 7.5 | 0.1% | Oct 5, 2026 | GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or... |
| CVE-2026-105294 | HIGH | 7.4 | 0.2% | Oct 5, 2026 | Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to w... |
| CVE-2026-105293 | HIGH | 8.1 | 0.4% | Oct 5, 2026 | Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Disc... |
| CVE-2026-105292 | MEDIUM | 5.9 | 0.2% | Oct 5, 2026 | Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject l... |
| CVE-2026-105223 | HIGH | 7.4 | 0.2% | Oct 5, 2026 | maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeco... |
| CVE-2026-105175 | HIGH | 7.3 | 0.3% | Oct 5, 2026 | A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing o... |
| CVE-2026-105174 | MEDIUM | 5.4 | 0.3% | Oct 5, 2026 | A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the fil... |
| CVE-2026-105173 | LOW | 3.5 | 0.2% | Oct 5, 2026 | A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanres... |
| CVE-2026-105172 | HIGH | 7.3 | 0.3% | Oct 5, 2026 | A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functio... |
| CVE-2026-105171 | MEDIUM | 6.3 | 0.2% | Oct 5, 2026 | A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03... |
| CVE-2026-105170 | HIGH | 7.3 | 0.4% | Oct 5, 2026 | A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b... |
| CVE-2026-105169 | HIGH | 7.3 | 0.3% | Oct 5, 2026 | A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b... |
| CVE-2026-105168 | MEDIUM | 6.3 | 0.2% | Oct 5, 2026 | A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b... |
| CVE-2026-105222 | HIGH | 7.4 | 0.2% | Oct 4, 2026 | The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the... |
| CVE-2026-105221 | HIGH | 7.4 | 0.2% | Oct 4, 2026 | The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to... |
| CVE-2026-105220 | HIGH | 7.8 | 0.2% | Oct 4, 2026 | Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup fro... |
| CVE-2026-105167 | HIGH | 7.3 | 0.3% | Oct 4, 2026 | A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b... |
| CVE-2026-105166 | HIGH | 7.3 | 0.3% | Oct 4, 2026 | A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492... |
| CVE-2026-105165 | MEDIUM | 6.3 | 0.2% | Oct 4, 2026 | A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function process_single_se... |
| CVE-2026-105164 | LOW | 2.7 | 0.5% | Oct 4, 2026 | A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE_FS_ParseInputFileNameEx of the file c... |
| CVE-2026-105163 | MEDIUM | 5.3 | 0.3% | Oct 4, 2026 | A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function... |
| CVE-2026-105219 | HIGH | 7.5 | 0.4% | Oct 4, 2026 | Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser ... |
| CVE-2026-105218 | HIGH | 7.4 | 0.2% | Oct 4, 2026 | gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-th... |
| CVE-2026-105217 | LOW | 3.1 | 0.1% | Oct 4, 2026 | Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allow... |