CVE Vulnerability Database
Search and browse 425,099 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-101915 | LOW | 3.7 | 0.3% | Sep 28, 2026 | @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1... |
| CVE-2026-101914 | MEDIUM | 6.5 | 0.3% | Sep 28, 2026 | @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1... |
| CVE-2026-101143 | MEDIUM | 4.3 | 0.4% | Sep 28, 2026 | A vulnerability was found in Eleveo Quality Management 9.7.0. Affected by this issue is some unknown functionality of th... |
| CVE-2026-101142 | MEDIUM | 6.3 | 0.3% | Sep 28, 2026 | A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown function... |
| CVE-2026-101141 | LOW | 3.5 | 0.2% | Sep 28, 2026 | A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audi... |
| CVE-2026-97686 | MEDIUM | 5.5 | — | Sep 28, 2026 | Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properl... |
| CVE-2026-97023 | HIGH | 7.1 | 0.5% | Sep 28, 2026 | A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a maliciou... |
| CVE-2026-84894 | HIGH | 7.5 | 0.1% | Sep 28, 2026 | In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a F... |
| CVE-2026-13018 | MEDIUM | 4.3 | — | Sep 28, 2026 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker t... |
| CVE-2026-102010 | HIGH | 7 | 0.3% | Sep 28, 2026 | A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, t... |
| CVE-2026-101139 | LOW | 2.7 | 0.3% | Sep 28, 2026 | A vulnerability was detected in Webkul Bagisto up to 2.4.6/2.5.0-beta4. This impacts an unknown function of the file /ad... |
| CVE-2026-101132 | LOW | 3.1 | 0.4% | Sep 28, 2026 | A security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2. The affected element is the function ... |
| CVE-2026-101131 | LOW | 3.3 | — | Sep 28, 2026 | A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the ... |
| CVE-2026-101111 | MEDIUM | 6.1 | 0.3% | Sep 28, 2026 | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6 - The public book-detail... |
| CVE-2026-101110 | CRITICAL | 9.8 | 0.3% | Sep 28, 2026 | Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 - site/booklibrary.php’s ... |
| CVE-2026-101109 | MEDIUM | 6.1 | 0.3% | Sep 28, 2026 | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8 - The public vehicle-... |
| CVE-2026-101108 | CRITICAL | 9.8 | 0.3% | Sep 28, 2026 | Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.... |
| CVE-2026-101105 | MEDIUM | 6.3 | — | Sep 28, 2026 | A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprof... |
| CVE-2026-100753 | MEDIUM | 6.1 | 0.3% | Sep 28, 2026 | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9 - The public pro... |
| CVE-2026-100752 | CRITICAL | 9.8 | 0.3% | Sep 28, 2026 | Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatem... |
| CVE-2026-96740 | MEDIUM | 6.5 | 0.4% | Sep 28, 2026 | A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client properties from the Console cu... |
| CVE-2026-75600 | HIGH | 8.8 | 0.8% | Sep 28, 2026 | FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL ... |
| CVE-2026-55160 | HIGH | 7.6 | 0.3% | Sep 28, 2026 | Stringer is a self-hosted, anti-social RSS reader. Prior to commit 75cb095, an unrestricted Server-Side Request Forgery ... |
| CVE-2026-55157 | HIGH | 8.4 | 0.7% | Sep 28, 2026 | Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge gra... |
| CVE-2026-55156 | MEDIUM | 5.3 | 0.4% | Sep 28, 2026 | Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge gra... |