CVE Vulnerability Database
Search and browse 425,099 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-101202 | MEDIUM | 6.3 | 0.2% | Sep 28, 2026 | A flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown function of the component ... |
| CVE-2026-101188 | HIGH | 8.3 | 0.5% | Sep 28, 2026 | A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue affects the function routerd... |
| CVE-2026-101093 | MEDIUM | 5.4 | — | Sep 28, 2026 | Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to de... |
| CVE-2026-101092 | MEDIUM | 5.3 | 0.2% | Sep 28, 2026 | SiYuan before v3.8.4 fails to enforce publish-access checks in the getCurrentAttrViewImages endpoint, allowing publish r... |
| CVE-2026-101091 | HIGH | 7.1 | 0.3% | Sep 28, 2026 | SiYuan versions before v3.8.4 fail to properly validate SQL statements in block query embed blocks executed against siyu... |
| CVE-2024-58386 | MEDIUM | 6.5 | 0.4% | Sep 28, 2026 | ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authentica... |
| CVE-2024-42002 | HIGH | 8.4 | 0.2% | Sep 28, 2026 | A code injection vulnerability has been discovered in the Robot Operating System 2 (ROS 2) 'ros2topic' command-line tool... |
| CVE-2026-97027 | LOW | 3.6 | 0.1% | Sep 28, 2026 | Flatpak passes through arbitrary vendor-extension keys unmodified when exporting an application's Desktop Entry (.deskto... |
| CVE-2026-97026 | LOW | 3.9 | 0.1% | Sep 28, 2026 | Flatpak creates temporary child repository directories under the user cache with world-writable permissions (0777). On m... |
| CVE-2026-97025 | LOW | 3.2 | 0.1% | Sep 28, 2026 | Flatpak writes the OCI repository authentication token with world-readable permissions (0644) in the system-helper's cac... |
| CVE-2026-91096 | HIGH | 7.5 | 0.1% | Sep 28, 2026 | In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams (WebTransportImpl::destr... |
| CVE-2026-91095 | MEDIUM | 5.3 | 0.1% | Sep 28, 2026 | In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and HTTPTransaction::... |
| CVE-2026-84895 | HIGH | 7.3 | 0.1% | Sep 28, 2026 | In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calli... |
| CVE-2026-18416 | MEDIUM | 5.3 | 0.2% | Sep 28, 2026 | The CoAP link-format helper match_path_uri() in subsys/net/lib/coap/coap_link_format.c compares a registered resource pa... |
| CVE-2026-18415 | HIGH | 7.1 | 0.1% | Sep 28, 2026 | ieee802154_send() in subsys/net/l2/ieee802154/ieee802154.c copies the outgoing packet into a single fixed 125-byte trans... |
| CVE-2026-18414 | HIGH | 7.8 | 0.1% | Sep 28, 2026 | The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffer_size fi... |
| CVE-2026-18413 | HIGH | 7.8 | 0.1% | Sep 28, 2026 | The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffer_size fi... |
| CVE-2026-16513 | HIGH | 7.8 | 0.2% | Sep 28, 2026 | The userspace verifier z_vrfy_rtio_sqe_copy_in_get_handles() in subsys/rtio/rtio_syscalls.c (subsys/rtio/rtio_handlers.c... |
| CVE-2026-102279 | LOW | 3.1 | 0.2% | Sep 28, 2026 | Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_DEBUG=true ... |
| CVE-2026-102278 | HIGH | 7.5 | 0.4% | Sep 28, 2026 | The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3... |
| CVE-2026-102277 | MEDIUM | 5.3 | 0.3% | Sep 28, 2026 | The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3... |
| CVE-2026-102276 | HIGH | 7.5 | 0.4% | Sep 28, 2026 | The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3... |
| CVE-2026-102275 | HIGH | 8.2 | 0.1% | Sep 28, 2026 | PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.from_jwk in j... |
| CVE-2026-102274 | HIGH | 7.5 | 0.4% | Sep 28, 2026 | PyJWT is a Python implementation of JSON Web Token standards. From 2.9.0 until 2.14.0, PyJWKSet does not catch the plain... |
| CVE-2026-102273 | HIGH | 7.4 | 0.2% | Sep 28, 2026 | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWT HMACAlgorithm.prepare_key ... |