CVE Vulnerability Database
Search and browse 390,014 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-54919 | HIGH | 7.4 | 0.3% | Jul 10, 2026 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In affected Mbed TLS backend versions ... |
| CVE-2026-54063 | HIGH | 7.5 | 0.6% | Jul 10, 2026 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, the checkSheet(... |
| CVE-2026-53657 | HIGH | 8.2 | 0.2% | Jul 10, 2026 | Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to 2.1.3, on an instance of Lima... |
| CVE-2026-53653 | HIGH | 8.7 | — | Jul 10, 2026 | Grav is a file-based Web platform. Prior to 1.7.53 and 2.0.0-rc.8, Grav allows an unauthenticated visitor to exhaust ser... |
| CVE-2026-51119 | CRITICAL | 9.1 | — | Jul 10, 2026 | An issue in Invixium IXM WEB v.2.3.85.25 allows an attacker to escalate privileges via the /SystemUsers/CreateAppUser co... |
| CVE-2026-3251 | MEDIUM | 6.4 | — | Jul 10, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webremium Istanbul... |
| CVE-2026-39903 | HIGH | 7.1 | 0.3% | Jul 10, 2026 | Simple Machines Forum 2.1 prior to commit 7d048f8 and 3.0 prior to commit a7875e8 contains an authorization bypass vulne... |
| CVE-2026-39244 | HIGH | 7.5 | — | Jul 10, 2026 | adm-zip before 0.5.18 is vulnerable to denial of service via a crafted ZIP file with a manipulated uncompressed size hea... |
| CVE-2026-2398 | HIGH | 8.8 | — | Jul 10, 2026 | Authorization bypass through User-Controlled key vulnerability in Adam Retail Automation Ltd. MobilMen 20T allows Privil... |
| CVE-2026-1667 | HIGH | 7.2 | — | Jul 10, 2026 | The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Arbitrary Post Creation and Stored Cross-Site Scrip... |
| CVE-2026-15377 | MEDIUM | 4.3 | 0.3% | Jul 10, 2026 | A vulnerability was determined in Eleveo Call Recording Software 9.7.0. Affected by this vulnerability is an unknown fun... |
| CVE-2026-15376 | MEDIUM | 6.3 | 0.3% | Jul 10, 2026 | A vulnerability was found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/... |
| CVE-2025-70796 | HIGH | 7.5 | — | Jul 10, 2026 | An unauthenticated path traversal vulnerability exists in the web management interface of WTI (Wireless Technology, Inc.... |
| CVE-2026-8609 | HIGH | 7.5 | 0.4% | Jul 10, 2026 | An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory... |
| CVE-2026-8595 | MEDIUM | 5.4 | 0.2% | Jul 10, 2026 | A user with Editor permissions can craft a dashboard whose table (TableNG) panel contains a malicious field name that ex... |
| CVE-2026-56676 | HIGH | 7.4 | 0.2% | Jul 10, 2026 | 9Router is an AI router & token saver. Prior to 0.5.2, 9router validates image URLs by resolving the host before fetchin... |
| CVE-2026-55501 | HIGH | 7.3 | — | Jul 10, 2026 | 9Router is an AI router & token saver. Prior to 0.4.80, the dashboard login rate limiter in src/lib/auth/loginLimiter.js... |
| CVE-2026-55500 | CRITICAL | 9.9 | — | Jul 10, 2026 | 9Router is an AI router & token saver. Prior to 0.4.80, the /api/settings/database endpoint allows full database export ... |
| CVE-2026-54149 | HIGH | 8.8 | — | Jul 10, 2026 | MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import functionality in apps/tools/... |
| CVE-2026-54001 | HIGH | 7 | 0.1% | Jul 10, 2026 | osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, on Wind... |
| CVE-2026-54000 | HIGH | 7 | 0.1% | Jul 10, 2026 | osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, on Wind... |
| CVE-2026-46388 | MEDIUM | 4.4 | — | Jul 10, 2026 | osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, an unpr... |
| CVE-2026-33382 | HIGH | 7.5 | 0.4% | Jul 10, 2026 | Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing... |
| CVE-2026-15375 | MEDIUM | 4.3 | 0.2% | Jul 10, 2026 | A vulnerability has been found in Eleveo Call Recording Software 9.7.0. This impacts an unknown function of the file /ca... |
| CVE-2026-15374 | MEDIUM | 6.3 | 0.3% | Jul 10, 2026 | A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown function of the file /callrec/rol... |