CVE Vulnerability Database
Search and browse 393,242 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-24243 | HIGH | 7.8 | — | Jul 1, 2026 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted dat... |
| CVE-2026-24242 | HIGH | 7.8 | — | Jul 1, 2026 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forgery. A s... |
| CVE-2026-24240 | HIGH | 7.8 | — | Jul 1, 2026 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted dat... |
| CVE-2026-13707 | HIGH | 7.6 | 0.3% | Jul 1, 2026 | Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program files src/... |
| CVE-2026-13706 | HIGH | 8.8 | 0.3% | Jul 1, 2026 | Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with pr... |
| CVE-2025-23351 | CRITICAL | 9 | — | Jul 1, 2026 | NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function ... |
| CVE-2025-23350 | CRITICAL | 9 | — | Jul 1, 2026 | NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function ... |
| CVE-2025-15646 | CRITICAL | 9.8 | 0.7% | Jul 1, 2026 | HTML::Gumbo versions before 0.19 for Perl disclose heap memory via type confusion. Support for the <template> element w... |
| CVE-2026-6688 | HIGH | 7.6 | 0.2% | Jul 1, 2026 | FatFs R0.16 and earlier contains a downstream-caller vulnerability pattern associated with FatFs long filename handling.... |
| CVE-2026-6687 | HIGH | 7.6 | 0.2% | Jul 1, 2026 | FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label length (XDIR_NumLabel) is trus... |
| CVE-2026-6686 | MEDIUM | 4.6 | 0.2% | Jul 1, 2026 | FatFs R0.16 and earlier contains an uninitialized cluster exposure when f_lseek() extends files beyond EOF without zero-... |
| CVE-2026-6685 | — | — | 0.2% | Jul 1, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority following a notification that... |
| CVE-2026-6684 | MEDIUM | 4.6 | 0.2% | Jul 1, 2026 | FatFs prior to R0.16 that use GPT scanning with 'FF_LBA64 = 1' contains an issue where an unbounded loop count derived f... |
| CVE-2026-6683 | MEDIUM | 4.6 | 0.2% | Jul 1, 2026 | FatFs R0.16 and earlier contains a divide-by-zero in exFAT sync logic bug when crafted metadata causes n_fatent - 2 to b... |
| CVE-2026-6682 | HIGH | 7.6 | 0.2% | Jul 1, 2026 | In FatFS R0.16 and earlier contains a FAT32 integer overflow bug in mount_volume() where fasize *= fs->n_fats can wrap, ... |
| CVE-2026-6283 | MEDIUM | 5.4 | — | Jul 1, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Informa... |
| CVE-2026-5220 | MEDIUM | 6.4 | — | Jul 1, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Informa... |
| CVE-2026-5142 | MEDIUM | 6.5 | 0.3% | Jul 1, 2026 | A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing t... |
| CVE-2026-5138 | MEDIUM | 4.3 | 0.2% | Jul 1, 2026 | A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information d... |
| CVE-2026-5135 | MEDIUM | 6.5 | 0.3% | Jul 1, 2026 | A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-edit permis... |
| CVE-2026-58399 | HIGH | 8.7 | 0.5% | Jul 1, 2026 | @acastellon/auth is an authentication control system for microservices. Versions prior to 2.3.0 appear to allow an unaut... |
| CVE-2026-58035 | MEDIUM | 4.8 | 0.2% | Jul 1, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F... |
| CVE-2026-58034 | MEDIUM | 4.8 | 0.2% | Jul 1, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F... |
| CVE-2026-58031 | MEDIUM | 5.4 | 0.2% | Jul 1, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F... |
| CVE-2026-2891 | HIGH | 8.2 | 0.3% | Jul 1, 2026 | The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP serve... |