Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
400,129CVE records
3,220Published, last 7 days
1,730In CISA KEV
1,478Critical, last 30 days
5,599Analysed
04:18 UTCLast NVD sync
Filters Show:
32,506 results. Medium severity.
Page 1 of 1,626| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-91109 | Medium | 6.5 | Not yet mapped | Insecure direct object reference | - | - | - | Oct 1, 2026 |
| CVE-2026-103641 | Medium | 5.5 | Not yet mapped | Out-of-bounds read | - | - | - | Oct 1, 2026 |
| CVE-2026-92537 | Medium | 5.3 | Not yet mapped | Insufficiently protected credentia | - | - | - | Oct 1, 2026 |
| CVE-2026-103532 | Medium | 6.9 | Not yet mapped | CWE-266 | - | - | - | Oct 1, 2026 |
| CVE-2026-103531 | Medium | 5.1 | Not yet mapped | Memory buffer overflow | - | - | - | Oct 1, 2026 |
| CVE-2026-103530 | Medium | 6.9 | Not yet mapped | Server-side request forgery (SSRF) | - | - | - | Oct 1, 2026 |
| CVE-2026-103592 | Medium | 6.9 | Not yet mapped | CWE-348 | - | - | - | Sep 30, 2026 |
| CVE-2026-103590 | Medium | 5.1 | Not yet mapped | Cross-site scripting | - | - | - | Sep 30, 2026 |
| CVE-2026-103589 | Medium | 5.1 | Not yet mapped | Cross-site scripting | - | - | - | Sep 30, 2026 |
| CVE-2026-103588 | Medium | 5.1 | Not yet mapped | Cross-site scripting | - | - | - | Sep 30, 2026 |
| CVE-2026-103587 | Medium | 5.1 | Not yet mapped | Cross-site scripting | - | - | - | Sep 30, 2026 |
| CVE-2026-47096 | Medium | 5.3 | Not yet mapped | Cross-site scripting | - | - | - | Sep 30, 2026 |
| CVE-2026-103001 | Medium | 6.5 | Not yet mapped | CWE-471 | - | - | - | Sep 30, 2026 |
| CVE-2026-102146 | Medium | 6.5 | Not yet mapped | CWE-73 | - | - | - | Sep 30, 2026 |
| CVE-2026-102145 | Medium | 6.6 | Not yet mapped | CWE-93 | - | - | - | Sep 30, 2026 |
| CVE-2026-102144 | Medium | 5.3 | Not yet mapped | Missing authentication for critica | - | - | - | Sep 30, 2026 |
| CVE-2026-102141 | Medium | 6.7 | Not yet mapped | CWE-73 | - | - | - | Sep 30, 2026 |
| CVE-2026-102140 | Medium | 4.9 | Not yet mapped | Insufficient verification of data | - | - | - | Sep 30, 2026 |
| CVE-2026-102139 | Medium | 6.5 | Not yet mapped | Insecure direct object reference | - | - | - | Sep 30, 2026 |
| CVE-2026-102137 | Medium | 4.1 | Not yet mapped | Unrestricted file upload | - | - | - | Sep 30, 2026 |
