CVE Vulnerability Database
Search and browse 425,075 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-68495 | HIGH | 7.5 | 0.7% | Oct 1, 2026 | The CBOR parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when de... |
| CVE-2026-56098 | MEDIUM | 4.3 | 0.3% | Oct 1, 2026 | A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass vulnerabi... |
| CVE-2026-56097 | MEDIUM | 6.5 | 0.3% | Oct 1, 2026 | A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Pro... |
| CVE-2026-12545 | MEDIUM | 6.7 | 0.5% | Oct 1, 2026 | A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI and the Railties (Ruby on... |
| CVE-2026-12542 | HIGH | 7.8 | 0.6% | Oct 1, 2026 | A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the... |
| CVE-2026-104018 | HIGH | 8.8 | 0.6% | Oct 1, 2026 | An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 when config... |
| CVE-2026-103923 | LOW | 2.1 | 0.3% | Oct 1, 2026 | KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. From 0.11.0 until 0.18.2, KaTeX uses ... |
| CVE-2026-103922 | CRITICAL | 9.3 | 0.2% | Oct 1, 2026 | Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.... |
| CVE-2026-103884 | MEDIUM | 6.5 | 0.2% | Oct 1, 2026 | A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enab... |
| CVE-2026-102369 | HIGH | 8.7 | — | Oct 1, 2026 | Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed ... |
| CVE-2026-102294 | HIGH | 8.5 | — | Oct 1, 2026 | TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted ... |
| CVE-2023-54404 | — | — | 0.3% | Oct 1, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. The described memory use onl... |
| CVE-2026-96659 | CRITICAL | 9.1 | 0.3% | Oct 1, 2026 | A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause ... |
| CVE-2026-96658 | HIGH | 8.8 | 0.7% | Oct 1, 2026 | A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions ... |
| CVE-2026-93546 | HIGH | 8.8 | 0.3% | Oct 1, 2026 | Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write acc... |
| CVE-2026-79768 | MEDIUM | 5.3 | 0.3% | Oct 1, 2026 | Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured ... |
| CVE-2026-77387 | MEDIUM | 4 | 0.2% | Oct 1, 2026 | geopy is a geocoding library for Python. Prior to 2.5.0, geopy.Point and Point.from_string() can spend excessive CPU tim... |
| CVE-2026-73975 | HIGH | 8.4 | 0.3% | Oct 1, 2026 | djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated de... |
| CVE-2026-73637 | HIGH | 7.3 | 0.3% | Oct 1, 2026 | Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows... |
| CVE-2026-73636 | HIGH | 8.1 | 0.4% | Oct 1, 2026 | Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all... |
| CVE-2026-67172 | LOW | 3.7 | 0.2% | Oct 1, 2026 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive i... |
| CVE-2026-67171 | MEDIUM | 5.3 | 0.2% | Oct 1, 2026 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exp... |
| CVE-2026-63718 | HIGH | 7.5 | 0.3% | Oct 1, 2026 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apa... |
| CVE-2026-63686 | HIGH | 7.5 | 0.3% | Oct 1, 2026 | A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platform... |
| CVE-2026-63292 | HIGH | 7.5 | 0.6% | Oct 1, 2026 | Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all pl... |