CVE Vulnerability Database
Search and browse 425,093 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-53989 | MEDIUM | 4.7 | — | Sep 29, 2026 | Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticat... |
| CVE-2026-53988 | CRITICAL | 10 | 0.5% | Sep 29, 2026 | Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthen... |
| CVE-2026-39117 | CRITICAL | 9.8 | — | Sep 29, 2026 | An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker ... |
| CVE-2026-11415 | — | — | — | Sep 29, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-102879 | MEDIUM | 5 | — | Sep 29, 2026 | ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the download_file and scrape_web ag... |
| CVE-2026-102878 | HIGH | 8.1 | — | Sep 29, 2026 | mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers... |
| CVE-2026-102877 | MEDIUM | 4.4 | — | Sep 29, 2026 | Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time-of-use gap in URL v... |
| CVE-2026-102876 | HIGH | 8.1 | 0.3% | Sep 29, 2026 | SurrealDB before 3.3.0 contains an authorization bypass in HTTP session construction where check_auth() verifies credent... |
| CVE-2026-102875 | HIGH | 7.8 | — | Sep 29, 2026 | VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate ... |
| CVE-2026-102331 | CRITICAL | 9.6 | — | Sep 29, 2026 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially ... |
| CVE-2026-102330 | MEDIUM | 6.5 | — | Sep 29, 2026 | Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compr... |
| CVE-2026-102329 | MEDIUM | 6.1 | — | Sep 29, 2026 | Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin pol... |
| CVE-2026-102328 | HIGH | 8.8 | — | Sep 29, 2026 | Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside ... |
| CVE-2026-102327 | HIGH | 7.5 | — | Sep 29, 2026 | Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who h... |
| CVE-2026-102326 | HIGH | 8.8 | — | Sep 29, 2026 | Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside ... |
| CVE-2026-102325 | MEDIUM | 4.3 | — | Sep 29, 2026 | Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin ... |
| CVE-2026-102324 | HIGH | 8.3 | — | Sep 29, 2026 | Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised... |
| CVE-2026-102323 | HIGH | 8.8 | — | Sep 29, 2026 | Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside ... |
| CVE-2026-102321 | HIGH | 8.8 | — | Sep 29, 2026 | Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside ... |
| CVE-2026-102320 | MEDIUM | 6.5 | — | Sep 29, 2026 | Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the ... |
| CVE-2026-102319 | LOW | 3.4 | — | Sep 29, 2026 | Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the ... |
| CVE-2026-102318 | MEDIUM | 4.7 | — | Sep 29, 2026 | Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the... |
| CVE-2026-102317 | HIGH | 8.6 | — | Sep 29, 2026 | Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to ... |
| CVE-2026-102316 | CRITICAL | 9.6 | — | Sep 29, 2026 | Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering ... |
| CVE-2026-102315 | LOW | 3.4 | — | Sep 29, 2026 | Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had ... |