CVE Vulnerability Database
Search and browse 425,097 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-102633 | MEDIUM | 5.9 | 0.4% | Sep 29, 2026 | libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit pl... |
| CVE-2026-102623 | MEDIUM | 6.5 | — | Sep 29, 2026 | A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances (VMIs) can cause... |
| CVE-2026-102557 | HIGH | 8.6 | 0.5% | Sep 29, 2026 | A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequate... |
| CVE-2026-102556 | HIGH | 8.6 | 0.5% | Sep 29, 2026 | A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong ... |
| CVE-2026-102425 | CRITICAL | 10 | 0.3% | Sep 29, 2026 | Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4 - Balbooa ... |
| CVE-2026-102424 | HIGH | 7.5 | 0.4% | Sep 29, 2026 | Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments i... |
| CVE-2026-101127 | CRITICAL | 9.4 | 0.3% | Sep 29, 2026 | Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4 - The public form... |
| CVE-2026-101126 | MEDIUM | 6.5 | 0.4% | Sep 29, 2026 | Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4 - The final form submission process... |
| CVE-2026-101112 | MEDIUM | 5.3 | 0.3% | Sep 29, 2026 | Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4 - The public removeTmpA... |
| CVE-2026-100245 | MEDIUM | 6.1 | — | Sep 29, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F... |
| CVE-2026-100244 | HIGH | 7.5 | — | Sep 29, 2026 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - CentralAuth... |
| CVE-2026-100243 | MEDIUM | 6.1 | — | Sep 29, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F... |
| CVE-2026-100242 | HIGH | 7.5 | 0.2% | Sep 29, 2026 | Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundati... |
| CVE-2026-100241 | HIGH | 7.5 | — | Sep 29, 2026 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Ex... |
| CVE-2026-100240 | CRITICAL | 9.1 | 0.1% | Sep 29, 2026 | Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Accessing Funct... |
| CVE-2026-100238 | MEDIUM | 6.1 | — | Sep 29, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F... |
| CVE-2022-51019 | HIGH | 8.8 | 1.8% | Sep 29, 2026 | Akaunting before 2.1.31 contains an OS command injection vulnerability in the module installation and update flow where ... |
| CVE-2026-97711 | LOW | 2.3 | — | Sep 29, 2026 | Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions.... |
| CVE-2026-97689 | HIGH | 7.5 | 0.3% | Sep 29, 2026 | urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.st... |
| CVE-2026-97688 | MEDIUM | 5.3 | 0.3% | Sep 29, 2026 | urllib3 is an HTTP client library for Python. From 2.6.2 until 2.8.0, HTTPResponse.stream and HTTPResponse.read_chunked ... |
| CVE-2026-97687 | HIGH | 8.1 | 0.2% | Sep 29, 2026 | urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxy_ssl_context, proxy_assert_hostname, pro... |
| CVE-2026-93332 | MEDIUM | 5.4 | — | Sep 29, 2026 | Improper access control in the partial connection API in Devolutions Server 2026.3.5.0 and earlier allows an authenticat... |
| CVE-2026-93330 | MEDIUM | 4.3 | — | Sep 29, 2026 | Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows a user with PAM edi... |
| CVE-2026-92371 | HIGH | 7 | — | Sep 29, 2026 | TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the ... |
| CVE-2026-92370 | HIGH | 8.8 | — | Sep 29, 2026 | An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux... |