CVE Vulnerability Database
Search and browse 389,967 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-11698 | CRITICAL | 9.2 | — | Jul 14, 2026 | A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerabilit... |
| CVE-2026-9653 | HIGH | 8.7 | — | Jul 14, 2026 | A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper va... |
| CVE-2026-9140 | HIGH | 8.7 | — | Jul 14, 2026 | A denial-of-service security issue exists in the 1719-AENTR. The security issue stems from improper handling of a UDP un... |
| CVE-2026-8590 | HIGH | 8.7 | 0.3% | Jul 14, 2026 | Vulnerability in Spotfire Spotfire Enterprise (Spotfire Server modules), Spotfire Spotfire Enterprise with External Cons... |
| CVE-2026-60114 | HIGH | 8.7 | 0.3% | Jul 14, 2026 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path traversal vulnerability that allows attacke... |
| CVE-2026-58479 | CRITICAL | 9.8 | — | Jul 14, 2026 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a command injection vulnerability in the optional ... |
| CVE-2026-58478 | MEDIUM | 6.5 | 0.3% | Jul 14, 2026 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a server-side request forgery (SSRF) vulnerability... |
| CVE-2026-58477 | HIGH | 7.5 | — | Jul 14, 2026 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauth... |
| CVE-2026-58476 | HIGH | 8.1 | — | Jul 14, 2026 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a cross-site request forgery vulnerability that al... |
| CVE-2026-58475 | MEDIUM | 6.1 | 0.2% | Jul 14, 2026 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a stored cross-site scripting vulnerability that a... |
| CVE-2026-52837 | MEDIUM | 6.9 | 0.4% | Jul 14, 2026 | Easy!Appointments is a self hosted appointment scheduler. In versions up to and including 1.5.2, the booking reschedule ... |
| CVE-2026-51105 | HIGH | 7.5 | 0.3% | Jul 14, 2026 | Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to cause a denial of service via t... |
| CVE-2026-15736 | HIGH | 8.3 | 0.3% | Jul 14, 2026 | Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of ... |
| CVE-2026-15696 | HIGH | 8.8 | — | Jul 14, 2026 | A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted element is the function fromVirtualSer of the... |
| CVE-2026-15695 | HIGH | 8.8 | 0.8% | Jul 14, 2026 | A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpListClient of the file... |
| CVE-2026-15694 | HIGH | 8.8 | — | Jul 14, 2026 | A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromSetIpBind of the file /goform/S... |
| CVE-2026-15265 | CRITICAL | 9.1 | 0.6% | Jul 14, 2026 | A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitr... |
| CVE-2026-14903 | MEDIUM | 6.5 | 1.0% | Jul 14, 2026 | Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary fil... |
| CVE-2026-14902 | MEDIUM | 6.1 | 0.5% | Jul 14, 2026 | An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users ... |
| CVE-2026-10714 | HIGH | 8.8 | — | Jul 14, 2026 | A security issue exists within FactoryTalk® Services Platform (FTSP), allowing an attacker to bypass JWT signature valid... |
| CVE-2026-10672 | CRITICAL | 9.1 | 0.4% | Jul 14, 2026 | subsys/net/lib/lwm2m/lwm2m_pull_context.c copied the firmware-update Package URI into a fixed static buffer (context.uri... |
| CVE-2026-10671 | HIGH | 7.1 | 0.1% | Jul 14, 2026 | In Zephyr's kernel pipe implementation, the userspace syscall verifier z_vrfy_k_pipe_init() in kernel/pipe.c used K_SYSC... |
| CVE-2026-10670 | MEDIUM | 5.5 | 0.1% | Jul 14, 2026 | The CONFIG_USERSPACE verification handler for the k_thread_name_copy() system call (z_vrfy_k_thread_name_copy() in kerne... |
| CVE-2026-10669 | HIGH | 7.8 | 0.1% | Jul 14, 2026 | On Xtensa SoCs built with CONFIG_XTENSA_MPU and CONFIG_USERSPACE, arch_buffer_validate() in arch/xtensa/core/mpu.c — the... |
| CVE-2026-10573 | MEDIUM | 6.3 | 0.4% | Jul 14, 2026 | A denial-of-service security issue exists in 1734 POINT I/O™ module. The security issue stems from improper handling of ... |