CVE Vulnerability Database
Search and browse 420,242 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-120250 | MEDIUM | 5.3 | 0.1% | Nov 1, 2026 | OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability in utils/email_utils.py and u... |
| CVE-2026-120249 | MEDIUM | 6.5 | 0.1% | Nov 1, 2026 | Thelia Back-office Default Twig Template before 1.1.1 contains a cross-site request forgery vulnerability in the /admin/... |
| CVE-2026-120248 | MEDIUM | 4.8 | 0.2% | Nov 1, 2026 | Thelia before 3.1.1 contains a stored cross-site scripting vulnerability that allows authenticated back-office administr... |
| CVE-2026-120247 | MEDIUM | 5.5 | 0.1% | Nov 1, 2026 | FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attac... |
| CVE-2026-120246 | MEDIUM | 5.5 | 0.1% | Nov 1, 2026 | FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack mem... |
| CVE-2026-120245 | MEDIUM | 5.5 | 0.1% | Nov 1, 2026 | FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks he... |
| CVE-2026-120244 | MEDIUM | 5.5 | 0.1% | Nov 1, 2026 | FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers... |
| CVE-2026-120243 | MEDIUM | 5.5 | 0.1% | Nov 1, 2026 | FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows at... |
| CVE-2026-120191 | HIGH | 7.3 | 0.8% | Nov 1, 2026 | A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of t... |
| CVE-2026-120190 | LOW | 3.5 | 0.4% | Nov 1, 2026 | A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulnerability is an unknown functio... |
| CVE-2026-120189 | CRITICAL | 10 | 1.3% | Nov 1, 2026 | A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of th... |
| CVE-2026-115946 | — | — | 0.2% | Nov 1, 2026 | XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder. Affe... |
| CVE-2026-120185 | MEDIUM | 4.7 | 0.2% | Oct 31, 2026 | A security flaw has been discovered in ken678 YznCMS up to 2.2.0. The affected element is the function Backend of the fi... |
| CVE-2026-120135 | HIGH | 8.2 | 0.6% | Oct 31, 2026 | Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0.... |
| CVE-2026-118636 | CRITICAL | 9.8 | 0.6% | Oct 31, 2026 | **UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject... |
| CVE-2026-118147 | HIGH | 7.4 | 0.6% | Oct 31, 2026 | Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-120210 | MEDIUM | 4.3 | 0.3% | Oct 31, 2026 | FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files ... |
| CVE-2026-120209 | CRITICAL | 9.8 | 0.5% | Oct 31, 2026 | AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens ... |
| CVE-2026-120208 | HIGH | 7.5 | 0.4% | Oct 31, 2026 | libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in unc_decoder_mixed_interleave::proces... |
| CVE-2026-120207 | HIGH | 7.1 | 0.2% | Oct 31, 2026 | Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows remote attackers to dele... |
| CVE-2026-120206 | MEDIUM | 5.9 | 0.1% | Oct 31, 2026 | Thelia before 3.2.0 contains a cross-site request forgery vulnerability in the back office that allows attackers to forg... |
| CVE-2026-120205 | HIGH | 8 | 0.3% | Oct 31, 2026 | Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows u... |
| CVE-2026-120204 | MEDIUM | 5.6 | 0.4% | Oct 31, 2026 | DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows rem... |
| CVE-2026-120203 | HIGH | 8.8 | 0.4% | Oct 31, 2026 | ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users ... |
| CVE-2026-120202 | MEDIUM | 6.5 | 0.3% | Oct 31, 2026 | Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide mali... |