CVE Vulnerability Database
Search and browse 425,099 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-102272 | HIGH | 7.4 | 0.2% | Sep 28, 2026 | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.prepare_key in jwt... |
| CVE-2026-102271 | HIGH | 7.4 | 0.2% | Sep 28, 2026 | PyJWT is a Python implementation of JSON Web Token standards. From 2.4.0 until 2.14.0, PyJWT HMACAlgorithm.prepare_key i... |
| CVE-2026-102270 | MEDIUM | 4.9 | 0.2% | Sep 28, 2026 | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT is_pem_format is affected because l... |
| CVE-2026-102269 | MEDIUM | 5.4 | 0.2% | Sep 28, 2026 | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT signature segment is affected becau... |
| CVE-2026-102268 | CRITICAL | 9.1 | 0.2% | Sep 28, 2026 | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, is_pem_format in jwt/utils.py is affected... |
| CVE-2026-102267 | CRITICAL | 9.1 | 0.2% | Sep 28, 2026 | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT PyJWKClient is affected because red... |
| CVE-2026-102266 | CRITICAL | 9.1 | 0.2% | Sep 28, 2026 | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.from_jwk is affect... |
| CVE-2026-102265 | MEDIUM | 5.3 | 0.3% | Sep 28, 2026 | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS._load in jwt/api_jws.py is... |
| CVE-2026-102006 | MEDIUM | 5.5 | 0.1% | Sep 28, 2026 | In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem fa... |
| CVE-2026-102005 | MEDIUM | 5.5 | 0.1% | Sep 28, 2026 | Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when pro... |
| CVE-2026-101918 | HIGH | 7.5 | 0.3% | Sep 28, 2026 | PyJWT is a Python implementation of JSON Web Token standards. From 2.0.0a1 until 2.15.0, PyJWT PyJWKClient.get_signing_k... |
| CVE-2026-101917 | HIGH | 7.5 | 0.4% | Sep 28, 2026 | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT get_signing_key_from_jwt is affecte... |
| CVE-2026-101916 | HIGH | 7.4 | 0.2% | Sep 28, 2026 | @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1... |
| CVE-2026-101187 | CRITICAL | 9.1 | 2.3% | Sep 28, 2026 | A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function pop_usb_device of ... |
| CVE-2026-101146 | MEDIUM | 4.3 | 0.3% | Sep 28, 2026 | A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.cre... |
| CVE-2026-101145 | MEDIUM | 4.3 | 0.2% | Sep 28, 2026 | A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the f... |
| CVE-2026-101144 | MEDIUM | 6.3 | 0.2% | Sep 28, 2026 | A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callre... |
| CVE-2026-100392 | HIGH | 7 | 0.2% | Sep 28, 2026 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2, Us... |
| CVE-2026-100371 | HIGH | 8.7 | 0.3% | Sep 28, 2026 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2, an... |
| CVE-2026-100370 | MEDIUM | 4.7 | 0.3% | Sep 28, 2026 | DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to version 1.0.15, the isDangerousUrl() method is respons... |
| CVE-2026-96760 | CRITICAL | 9.8 | 0.4% | Sep 28, 2026 | Authlib (v1.8.0 and below) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json... |
| CVE-2026-93355 | HIGH | 8.1 | 0.3% | Sep 28, 2026 | LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured ide... |
| CVE-2026-87741 | HIGH | 8.8 | 0.4% | Sep 28, 2026 | The ConvertPlus plugin for WordPress is vulnerable to Deserialization of Untrusted Data in all versions up to, and inclu... |
| CVE-2026-86950 | HIGH | 8.8 | 26.2% | Sep 28, 2026 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS ... |
| CVE-2026-102004 | HIGH | 7.8 | 0.1% | Sep 28, 2026 | Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory ma... |