CVE Vulnerability Database
Search and browse 425,097 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-95276 | HIGH | 8.3 | — | Sep 29, 2026 | Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromise... |
| CVE-2026-95275 | MEDIUM | 6.5 | 0.3% | Sep 29, 2026 | Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypas... |
| CVE-2026-95274 | HIGH | 8.3 | — | Sep 29, 2026 | Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromis... |
| CVE-2026-94954 | HIGH | 8.8 | — | Sep 29, 2026 | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware ... |
| CVE-2026-84842 | HIGH | 8.1 | 0.4% | Sep 29, 2026 | IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST com... |
| CVE-2026-84440 | HIGH | 8.8 | 0.7% | Sep 29, 2026 | IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An au... |
| CVE-2026-84436 | CRITICAL | 9.1 | 0.7% | Sep 29, 2026 | IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowi... |
| CVE-2026-84422 | HIGH | 7.2 | 0.7% | Sep 29, 2026 | IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion fun... |
| CVE-2026-84421 | HIGH | 8.8 | 0.6% | Sep 29, 2026 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to... |
| CVE-2026-84414 | HIGH | 7.8 | 0.1% | Sep 29, 2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due t... |
| CVE-2026-12345 | MEDIUM | 5.9 | 0.3% | Sep 29, 2026 | The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during... |
| CVE-2026-102811 | HIGH | 7.5 | — | Sep 29, 2026 | Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmi... |
| CVE-2026-102810 | HIGH | 7.5 | — | Sep 29, 2026 | Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows u... |
| CVE-2026-102809 | MEDIUM | 6.5 | — | Sep 29, 2026 | PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fail... |
| CVE-2026-102808 | MEDIUM | 6.5 | 0.2% | Sep 29, 2026 | PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sd_stress command where the -b byt... |
| CVE-2026-102807 | MEDIUM | 5.3 | — | Sep 29, 2026 | OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in the mcp.app.view method that allows read-s... |
| CVE-2026-102806 | MEDIUM | 6.3 | — | Sep 29, 2026 | OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist t... |
| CVE-2026-102762 | HIGH | 8.2 | — | Sep 29, 2026 | The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet,... |
| CVE-2026-102761 | CRITICAL | 9.3 | — | Sep 29, 2026 | NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained... |
| CVE-2026-102760 | HIGH | 8.3 | — | Sep 29, 2026 | When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has b... |
| CVE-2026-102759 | MEDIUM | 6.3 | — | Sep 29, 2026 | NetX Secure TLS accepts an empty application-data record without verifying its message authentication code. In `_nx_secu... |
| CVE-2026-102758 | HIGH | 7.5 | — | Sep 29, 2026 | The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-encoded data... |
| CVE-2026-102757 | HIGH | 8.5 | 0.1% | Sep 29, 2026 | An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing,... |
| CVE-2026-102730 | HIGH | 8.6 | 0.1% | Sep 29, 2026 | Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **wri... |
| CVE-2026-102729 | MEDIUM | 5.9 | — | Sep 29, 2026 | `gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource ... |