CVE Vulnerability Database
Search and browse 389,967 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-59199 | HIGH | 7.5 | 0.4% | Jul 14, 2026 | Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-o... |
| CVE-2026-59198 | HIGH | 7.5 | — | Jul 14, 2026 | Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer w... |
| CVE-2026-58461 | — | — | — | Jul 14, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-55954 | CRITICAL | 9.1 | 0.4% | Jul 14, 2026 | Authentication Bypass by Spoofing vulnerability in ueberauth ueberauth_apple allows account takeover via unvalidated ID ... |
| CVE-2026-55651 | HIGH | 7.1 | — | Jul 14, 2026 | Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive Data Exposure vulnerability in ... |
| CVE-2026-52841 | LOW | 3.1 | — | Jul 14, 2026 | Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Google::oauth` at `application/co... |
| CVE-2026-52840 | LOW | 2.7 | 0.2% | Jul 14, 2026 | Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Caldav::connect_to_server` at `ap... |
| CVE-2026-52839 | LOW | 3.3 | 0.1% | Jul 14, 2026 | Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 correctly filter provider-scoped appoi... |
| CVE-2026-52838 | LOW | 2.6 | — | Jul 14, 2026 | Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 allow administrators to define a custo... |
| CVE-2026-23573 | MEDIUM | 6.1 | 0.3% | Jul 14, 2026 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerabi... |
| CVE-2026-15699 | MEDIUM | 6.3 | — | Jul 14, 2026 | A vulnerability was identified in spencermountain compromise up to 14.15.1. Affected is the function nlp.extend of the f... |
| CVE-2026-15698 | MEDIUM | 6.3 | — | Jul 14, 2026 | A vulnerability was determined in kofrasa mingo up to 7.2.1. This impacts the function update/updateOne/updateMany of th... |
| CVE-2026-15697 | MEDIUM | 6.3 | 0.3% | Jul 14, 2026 | A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/... |
| CVE-2026-15392 | HIGH | 7.7 | 0.2% | Jul 14, 2026 | DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The co... |
| CVE-2026-14504 | HIGH | 8.2 | 0.3% | Jul 14, 2026 | An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on ... |
| CVE-2026-12707 | HIGH | 7.5 | — | Jul 14, 2026 | Summary Cloudflare quiche was discovered to be vulnerable to memory resource exhaustion due to unbounded queuing of p... |
| CVE-2026-12659 | HIGH | 8.7 | — | Jul 14, 2026 | A denial-of-service security issue exists in the affected products. The security issue stems from improper handling of e... |
| CVE-2026-12523 | HIGH | 7.5 | 0.3% | Jul 14, 2026 | Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by mea... |
| CVE-2026-11944 | MEDIUM | 6.5 | — | Jul 14, 2026 | openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment ... |
| CVE-2026-11917 | HIGH | 7.2 | — | Jul 14, 2026 | A path traversal security issue exists within Rockwell Automation ThinManager® software due to improper limitation of fi... |
| CVE-2026-11403 | HIGH | 8.7 | 0.3% | Jul 14, 2026 | A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to... |
| CVE-2025-62826 | MEDIUM | 4.3 | 0.3% | Jul 14, 2026 | An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnera... |
| CVE-2025-62675 | MEDIUM | 4.3 | 0.2% | Jul 14, 2026 | An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnera... |
| CVE-2025-53379 | HIGH | 7.5 | 0.4% | Jul 14, 2026 | A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versio... |
| CVE-2025-43892 | MEDIUM | 4.3 | 0.3% | Jul 14, 2026 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all v... |