CVE Vulnerability Database
Search and browse 425,066 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-103623 | HIGH | 8.8 | 0.2% | Oct 2, 2026 | Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary cod... |
| CVE-2026-103622 | HIGH | 8.8 | 0.3% | Oct 2, 2026 | Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside... |
| CVE-2026-103621 | MEDIUM | 4.3 | 0.2% | Oct 2, 2026 | Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin d... |
| CVE-2026-101104 | HIGH | 7.7 | 0.3% | Oct 2, 2026 | The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to m... |
| CVE-2026-90970 | CRITICAL | 9.9 | — | Oct 2, 2026 | GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 1... |
| CVE-2026-5782 | MEDIUM | 5.2 | 0.1% | Oct 2, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in MRV Technology For... |
| CVE-2026-39717 | MEDIUM | 4.3 | 0.2% | Oct 2, 2026 | Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access C... |
| CVE-2026-39601 | LOW | 3.7 | 0.2% | Oct 2, 2026 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in WPdevelop B... |
| CVE-2026-39600 | MEDIUM | 4.7 | 0.2% | Oct 2, 2026 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Mehul Gohil Aculect AI Companion aculect-ai-compani... |
| CVE-2026-39444 | MEDIUM | 5.4 | — | Oct 2, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in PublishPress PublishPress Series organize-series allow... |
| CVE-2026-39439 | MEDIUM | 6.5 | — | Oct 2, 2026 | Missing Authorization vulnerability in Kiera Howe WebSamurai websamurai allows Exploiting Incorrectly Configured Access ... |
| CVE-2026-32585 | MEDIUM | 6.5 | 0.2% | Oct 2, 2026 | Missing Authorization vulnerability in airano Airano MCP Bridge airano-mcp-bridge allows Exploiting Incorrectly Configur... |
| CVE-2026-32584 | MEDIUM | 5.3 | — | Oct 2, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete D... |
| CVE-2026-104638 | MEDIUM | 5.3 | — | Oct 2, 2026 | A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699... |
| CVE-2026-104637 | HIGH | 7.3 | — | Oct 2, 2026 | A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61... |
| CVE-2026-104625 | MEDIUM | 6.3 | 0.2% | Oct 2, 2026 | A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of t... |
| CVE-2026-104026 | HIGH | 7.8 | — | Oct 2, 2026 | In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A mali... |
| CVE-2026-94422 | HIGH | 8.8 | 0.7% | Oct 2, 2026 | An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass th... |
| CVE-2026-93875 | HIGH | 7.2 | — | Oct 2, 2026 | The JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'friendlyTime' parameter in... |
| CVE-2026-85215 | HIGH | 7.1 | 0.2% | Oct 2, 2026 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software S... |
| CVE-2026-19652 | CRITICAL | 9.8 | 0.3% | Oct 2, 2026 | The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.0. ... |
| CVE-2026-104721 | MEDIUM | 6.3 | 0.3% | Oct 2, 2026 | Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulne... |
| CVE-2026-104614 | MEDIUM | 6.3 | — | Oct 2, 2026 | A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown proce... |
| CVE-2026-104613 | MEDIUM | 6.3 | — | Oct 2, 2026 | A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown co... |
| CVE-2026-96289 | HIGH | 8.2 | — | Oct 2, 2026 | Uncontrolled Recursion vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. ... |