CVE Vulnerability Database
Search and browse 390,014 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-56373 | MEDIUM | 5.3 | 0.2% | Jul 10, 2026 | ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when me... |
| CVE-2026-56366 | MEDIUM | 6.5 | 0.1% | Jul 10, 2026 | ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths... |
| CVE-2026-56354 | MEDIUM | 5.4 | 0.2% | Jul 10, 2026 | n8n before 1.123.24, 2.10.4, and 2.12.0 (across its 1.x and 2.x branches) contains cross-site scripting and open redirec... |
| CVE-2026-56335 | HIGH | 7.1 | — | Jul 10, 2026 | Capgo before 12.128.2 contains an authorization bypass vulnerability where write-scoped API keys can directly mutate pro... |
| CVE-2026-56329 | MEDIUM | 6.4 | — | Jul 10, 2026 | Capgo before 12.128.2 contains a cross-tenant preview namespace collision vulnerability caused by non-bijective decoding... |
| CVE-2026-56312 | MEDIUM | 6.9 | — | Jul 10, 2026 | Capgo before 12.128.2 contains an improper validation vulnerability in the accept_invitation endpoint that creates user ... |
| CVE-2026-56309 | MEDIUM | 5.4 | — | Jul 10, 2026 | Capgo before 12.128.2 fails to enforce plan/quota restrictions on the /files/upload/attachments endpoint, allowing plan-... |
| CVE-2026-56305 | HIGH | 8.7 | 0.4% | Jul 10, 2026 | Capgo before 12.128.2 contains an authentication bypass vulnerability in the password change endpoint that allows attack... |
| CVE-2026-56279 | HIGH | 8.7 | — | Jul 10, 2026 | Capgo before 12.128.2 contains an information disclosure vulnerability in the get_orgs_v7(userid) RPC function that rema... |
| CVE-2026-56261 | HIGH | 7.5 | 0.4% | Jul 10, 2026 | Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server's /crawl/job ... |
| CVE-2026-56254 | HIGH | 8.3 | — | Jul 10, 2026 | In @capgo/capacitor-updater (Cap-go/capgo) before 12.128.2, the end-to-end encryption scheme distributes the private key... |
| CVE-2026-38059 | HIGH | 7.5 | 0.6% | Jul 10, 2026 | The iDirect iQ200 exposes the /api/identity and /api/ REST API endpoints without authentication. An unauthenticated atta... |
| CVE-2026-38057 | HIGH | 8.1 | 0.3% | Jul 10, 2026 | The iDirect iQ200 does not validate CSRF tokens on state-changing API endpoints after authentication. The /api/reboot en... |
| CVE-2026-29519 | HIGH | 8.2 | 0.4% | Jul 10, 2026 | Lucee CFML Server versions across the 5.3.x, 6.1.x, 6.2.x, and 7.0.x release lines contain a reflected cross-site script... |
| CVE-2026-22660 | HIGH | 8.6 | 0.3% | Jul 10, 2026 | FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administra... |
| CVE-2026-22659 | HIGH | 8.1 | 0.3% | Jul 10, 2026 | FlaskBB through 2.2.0, fixed in commit acc88cf, contains an authorization bypass vulnerability that allows authenticated... |
| CVE-2025-12127 | — | — | — | Jul 10, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2026-56813 | LOW | 2.1 | — | Jul 10, 2026 | Improper Neutralization of Parameter/Argument Delimiters vulnerability in elixir-plug plug allows an attacker to inject ... |
| CVE-2026-54470 | MEDIUM | 5.3 | 0.2% | Jul 10, 2026 | Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior contain(s) an Improper Restriction of XML External Entity Ref... |
| CVE-2026-54469 | HIGH | 8.8 | 0.4% | Jul 10, 2026 | Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability... |
| CVE-2026-56814 | MEDIUM | 6.9 | — | Jul 10, 2026 | Plug.Parsers.MULTIPART, the multipart request-body parser used to handle file uploads and multipart forms, does not enfo... |
| CVE-2026-56690 | HIGH | 8.5 | 0.2% | Jul 10, 2026 | Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an S... |
| CVE-2026-56689 | HIGH | 7.7 | 0.2% | Jul 10, 2026 | Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an S... |
| CVE-2026-56688 | CRITICAL | 9.1 | 1.3% | Jul 10, 2026 | Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an O... |
| CVE-2026-54468 | MEDIUM | 6.5 | 0.3% | Jul 10, 2026 | Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vulnerability. A low privileged ... |