CVE Vulnerability Database
Search and browse 425,069 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-51875 | CRITICAL | 9.1 | 0.1% | Oct 1, 2026 | In Devika v1.0, the Feature Agent save_code_to_project function contains a path traversal vulnerability that allows atta... |
| CVE-2026-51874 | HIGH | 7.5 | 0.2% | Oct 1, 2026 | In Devika v1.0, the Patcher Agent save_code_to_project function contains a path traversal vulnerability that allows atta... |
| CVE-2026-51873 | HIGH | 8.8 | 0.3% | Oct 1, 2026 | Devika v1.0 is vulnerable to Directory Traversal in the Coder.save_code_to_project function, which allows attackers to w... |
| CVE-2026-34494 | HIGH | 7.2 | 0.2% | Oct 1, 2026 | - On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Loc... |
| CVE-2026-34493 | HIGH | 7.2 | 0.2% | Oct 1, 2026 | - On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locatio... |
| CVE-2026-27873 | MEDIUM | 5.6 | 0.1% | Oct 1, 2026 | - Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affec... |
| CVE-2026-18397 | CRITICAL | 9.4 | 0.3% | Oct 1, 2026 | This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination... |
| CVE-2026-104356 | MEDIUM | 5.9 | 0.3% | Oct 1, 2026 | PictShare before version 3.7.1 contains a weak randomness vulnerability where the getRandomString() function uses the no... |
| CVE-2026-104051 | HIGH | 8.2 | 0.4% | Oct 1, 2026 | PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain ... |
| CVE-2026-104002 | MEDIUM | 5.3 | 0.3% | Oct 1, 2026 | A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actor... |
| CVE-2026-96780 | HIGH | 8.2 | 0.4% | Oct 1, 2026 | figlet.js is a FIG driver written in JavaScript that aims to implement the FIGfont specification. Prior to 1.11.3, text(... |
| CVE-2026-71451 | MEDIUM | 5.6 | 0.4% | Oct 1, 2026 | - OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection. This issue affects Eas... |
| CVE-2026-55396 | HIGH | 8.5 | 0.1% | Oct 1, 2026 | Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne... |
| CVE-2026-55395 | CRITICAL | 9.4 | 0.2% | Oct 1, 2026 | Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLoo... |
| CVE-2026-55394 | MEDIUM | 5.3 | 0.1% | Oct 1, 2026 | Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows adjacent unauthenticat... |
| CVE-2026-55393 | CRITICAL | 10 | 0.4% | Oct 1, 2026 | Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLo... |
| CVE-2026-27874 | MEDIUM | 5 | 0.1% | Oct 1, 2026 | : Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-c... |
| CVE-2026-104183 | MEDIUM | 5.1 | 0.2% | Oct 1, 2026 | stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior... |
| CVE-2026-104182 | MEDIUM | 6.2 | 0.1% | Oct 1, 2026 | stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior... |
| CVE-2026-104181 | MEDIUM | 5.4 | 0.3% | Oct 1, 2026 | Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.13.3 and 5.8.3... |
| CVE-2026-104020 | HIGH | 7.5 | 0.4% | Oct 1, 2026 | Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor t... |
| CVE-2026-102514 | HIGH | 8.4 | 0.1% | Oct 1, 2026 | Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea co... |
| CVE-2026-102370 | MEDIUM | 5.4 | 0.2% | Oct 1, 2026 | Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do no... |
| CVE-2026-93832 | MEDIUM | 4.4 | 0.1% | Oct 1, 2026 | A component of one of the Motorola system applications was exported without permission, allowing for the revocation of r... |
| CVE-2026-82358 | MEDIUM | 6.5 | 0.2% | Oct 1, 2026 | RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO (Service Data Object) server implementation 'src... |