CVE Vulnerability Database
Search and browse 425,097 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-100287 | MEDIUM | 5.4 | — | Sep 29, 2026 | Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated... |
| CVE-2026-100286 | MEDIUM | 6.5 | — | Sep 29, 2026 | Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and earlier allows an authenticat... |
| CVE-2023-54400 | CRITICAL | 9.8 | — | Sep 29, 2026 | Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated... |
| CVE-2026-86035 | HIGH | 8.5 | 0.4% | Sep 29, 2026 | Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 202... |
| CVE-2026-68911 | HIGH | 8.7 | — | Sep 29, 2026 | Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client... |
| CVE-2026-65102 | HIGH | 7.8 | — | Sep 29, 2026 | NVIDIA DeepStream contains a vulnerability where an attacker could cause an integer overflow by supplying crafted tenso... |
| CVE-2026-63209 | HIGH | 7.5 | — | Sep 29, 2026 | compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2... |
| CVE-2026-49243 | CRITICAL | 9.6 | 0.3% | Sep 29, 2026 | Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.650, Webmin users who click o... |
| CVE-2026-22101 | MEDIUM | 5.1 | 0.1% | Sep 29, 2026 | The access to the service menu is obfuscated, but possible with only physical access. This menu exposes sensitive inform... |
| CVE-2026-22094 | CRITICAL | 9.3 | 0.2% | Sep 29, 2026 | The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the S... |
| CVE-2026-102570 | MEDIUM | 5.5 | — | Sep 29, 2026 | ClipBucket v5 through 5.5.3-#197 contains a time-based blind SQL injection vulnerability in the language update function... |
| CVE-2026-102569 | MEDIUM | 5.5 | 0.2% | Sep 29, 2026 | ClipBucket v5 through 5.5.3-#197 contains a time-based blind SQL injection vulnerability in the admin video edit functio... |
| CVE-2026-102568 | MEDIUM | 5.5 | — | Sep 29, 2026 | Pardus Parental Control before 0.7.0 contains an incorrect authorization vulnerability in the polkit policy that allows ... |
| CVE-2026-102567 | MEDIUM | 6.1 | — | Sep 29, 2026 | CTranslate2 before 4.8.1 contains an out-of-bounds heap read vulnerability in the binary model loader when deserializing... |
| CVE-2026-102566 | HIGH | 7.8 | — | Sep 29, 2026 | CTranslate2 before 4.8.1 contains a heap-based buffer overflow in the binary model loader that fails to validate payload... |
| CVE-2026-102491 | HIGH | 7.3 | — | Sep 29, 2026 | A vulnerability was identified in mahonelau kykms up to 8f130c2d85842d5b44caae78cc46d65e505949f7. The impacted element i... |
| CVE-2026-102371 | MEDIUM | 5.7 | — | Sep 29, 2026 | In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the ... |
| CVE-2025-33207 | MEDIUM | 6.8 | 0.2% | Sep 29, 2026 | NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause imp... |
| CVE-2015-20122 | HIGH | 7.5 | — | Sep 29, 2026 | Seeyon A6 collaborative office automation platform contains an unauthenticated SQL injection vulnerability in the attach... |
| CVE-2026-97395 | HIGH | 8.1 | 0.2% | Sep 29, 2026 | Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set Fil... |
| CVE-2026-86450 | HIGH | 7.5 | — | Sep 29, 2026 | Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix... |
| CVE-2026-81569 | MEDIUM | 4.3 | — | Sep 29, 2026 | An improper authorization vulnerability exists in the handling of sub-workflow tasks. An authenticated user who does not... |
| CVE-2026-78214 | MEDIUM | 5.3 | — | Sep 29, 2026 | An authentication bypass vulnerability exists in the protection of Actuator endpoints. The application determines whethe... |
| CVE-2026-71899 | MEDIUM | 6.5 | 0.1% | Sep 29, 2026 | A missing authorization vulnerability exists in the `query-dynamic-sub-workflows` API of Apache DolphinScheduler. The AP... |
| CVE-2026-71898 | MEDIUM | 4.3 | — | Sep 29, 2026 | An incorrect authorization check in Apache DolphinScheduler allows an authenticated user with only read permission for a... |