CVE Vulnerability Database
Search and browse 425,064 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105216 | HIGH | 7.4 | 0.2% | Oct 4, 2026 | go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to imperso... |
| CVE-2026-105161 | MEDIUM | 5.3 | 0.1% | Oct 4, 2026 | A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the compo... |
| CVE-2026-105224 | MEDIUM | 5.4 | 0.2% | Oct 4, 2026 | YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors t... |
| CVE-2026-105089 | HIGH | 8.7 | 0.2% | Oct 4, 2026 | WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission... |
| CVE-2026-105086 | HIGH | 8.7 | 0.2% | Oct 4, 2026 | WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders... |
| CVE-2026-104402 | MEDIUM | 4.3 | 0.2% | Oct 4, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp allows Ret... |
| CVE-2026-105215 | CRITICAL | 9.1 | 0.3% | Oct 4, 2026 | ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'ext... |
| CVE-2026-105214 | LOW | 2.3 | 0.2% | Oct 4, 2026 | Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server requ... |
| CVE-2026-105213 | HIGH | 8.2 | 0.2% | Oct 4, 2026 | ZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2 authentication, verifying only... |
| CVE-2026-105212 | HIGH | 7.5 | 0.3% | Oct 4, 2026 | ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UI... |
| CVE-2026-105211 | HIGH | 8.1 | 0.3% | Oct 4, 2026 | ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers ... |
| CVE-2026-105210 | HIGH | 8.2 | 0.2% | Oct 4, 2026 | ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose ... |
| CVE-2026-105209 | CRITICAL | 9.6 | 0.2% | Oct 4, 2026 | ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issuing passkey o... |
| CVE-2026-105208 | HIGH | 7.7 | 0.1% | Oct 4, 2026 | ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, ... |
| CVE-2026-105207 | CRITICAL | 9.8 | 0.3% | Oct 4, 2026 | ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external identity providers... |
| CVE-2026-105206 | MEDIUM | 5.3 | 0.3% | Oct 4, 2026 | ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, whi... |
| CVE-2026-105205 | MEDIUM | 5.3 | — | Oct 4, 2026 | SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink ... |
| CVE-2026-105158 | HIGH | 7.3 | 0.4% | Oct 4, 2026 | A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.creat... |
| CVE-2026-105157 | MEDIUM | 4.3 | 0.4% | Oct 4, 2026 | A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocCon... |
| CVE-2026-105156 | LOW | 3.7 | 0.2% | Oct 4, 2026 | A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/syste... |
| CVE-2026-105149 | HIGH | 7.3 | 0.3% | Oct 4, 2026 | A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /st... |
| CVE-2026-105148 | HIGH | 7.3 | — | Oct 4, 2026 | A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shar... |
| CVE-2026-105147 | HIGH | 7.3 | 0.3% | Oct 4, 2026 | A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the component JWT Secret Ha... |
| CVE-2026-97307 | HIGH | 7.5 | 0.2% | Oct 4, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculato... |
| CVE-2026-105146 | MEDIUM | 4.7 | 0.2% | Oct 4, 2026 | A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the fu... |