CVE Vulnerability Database

Search and browse 425,079 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-102376HIGH7.1Subscriber Cross Site Scripting (XSS) in Branda <= 3.4.32 versions.
CVE-2026-102375MEDIUM6.5Missing Authorization vulnerability in Optimole Optimole optimole-wp allows Exploiting Incorrectly Configured Access Con...
CVE-2026-100512CRITICAL9.8Contributor PHP Object Injection in Nested Pages <= 3.3.2 versions.
CVE-2026-100510HIGH7.1Unauthenticated Cross Site Scripting (XSS) in Post and Page Builder by BoldGrid <= 1.27.14 versions.
CVE-2026-75969CRITICAL9.1Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Fir...
CVE-2026-62308CRITICAL9.1Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.6, Tugtainer allows an...
CVE-2026-55494CRITICAL9.8Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.4, Tugtainer Agent all...
CVE-2026-55181CRITICAL9.4Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.3, Tugtainer's OIDC au...
CVE-2026-55177HIGH7.6CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to versio...
CVE-2026-55176CRITICAL9Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, two a...
CVE-2026-46711HIGH8.3Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, the w...
CVE-2026-19553HIGH7.6ssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if ssl.SSLContext.check_hostname wa...
CVE-2026-19445CRITICAL9.2A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns...
CVE-2026-103444LOW1.1Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation ...
CVE-2026-103443LOW1.1Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation ...
CVE-2026-103241HIGH7.5A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/pa...
CVE-2026-103233MEDIUM6.3A security vulnerability has been detected in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f...
CVE-2026-103232HIGH7.3A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff...
CVE-2026-102490HIGH7.8Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system wri...
CVE-2026-102489CRITICAL9.8Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the ...
CVE-2026-80490MEDIUM4.4Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the haystack string length before the scalar is stringifi...
CVE-2026-55174MEDIUM5.9UltrafastSecp256k1 is a high-performance, multi-backend secp256k1 engine with reproducible audit evidence, compatibility...
CVE-2026-47604MEDIUM5.5NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user ma...
CVE-2026-47603MEDIUM5.5NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user ma...
CVE-2026-47602HIGH7.1NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user ca...