CVE Vulnerability Database
Search and browse 394,365 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-40079 | CRITICAL | 9.8 | 1.1% | Jun 25, 2026 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Command ... |
| CVE-2026-39951 | HIGH | 8.8 | 0.2% | Jun 25, 2026 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a Stored SQL Injectio... |
| CVE-2025-60473 | MEDIUM | 5.5 | 0.1% | Jun 25, 2026 | A NULL pointer dereference in the gf_filter_in_parent_chain function (/filter_core/filter_pid.c) of GPAC Project/MP4Box ... |
| CVE-2025-60466 | MEDIUM | 5 | 0.1% | Jun 25, 2026 | A use-after-free in the gf_filter_pid_get_packet function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.0... |
| CVE-2026-39955 | CRITICAL | 9.8 | 0.3% | Jun 24, 2026 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have pre-authentication SQ... |
| CVE-2026-39948 | CRITICAL | 9.8 | 0.5% | Jun 24, 2026 | Cacti is an open source performance and fault management framework. In versions 1.2.30 and prior, the rfilter request pa... |
| CVE-2026-39938 | CRITICAL | 9.8 | 0.4% | Jun 24, 2026 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have unauthenticated LFI t... |
| CVE-2026-39900 | MEDIUM | 6.1 | 0.2% | Jun 24, 2026 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflecte... |
| CVE-2026-39899 | MEDIUM | 5.3 | 0.3% | Jun 24, 2026 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Tra... |
| CVE-2025-8106 | — | — | — | Jun 24, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2025-60474 | HIGH | 7.5 | 0.5% | Jun 24, 2026 | A buffer overflow in the gf_media_import function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 26.02.0 allo... |
| CVE-2025-60467 | HIGH | 7.5 | 0.5% | Jun 24, 2026 | A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_pid.c) of GPAC Project/MP4Box ... |
| CVE-2026-9779 | HIGH | 7.2 | 0.4% | Jun 24, 2026 | ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability.... |
| CVE-2026-9778 | HIGH | 7.2 | 1.5% | Jun 24, 2026 | ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote a... |
| CVE-2026-9777 | HIGH | 7.2 | 1.5% | Jun 24, 2026 | ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attacker... |
| CVE-2026-9776 | HIGH | 7.5 | 1.6% | Jun 24, 2026 | ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability. This vulnerability ... |
| CVE-2026-9775 | MEDIUM | 6.5 | 1.2% | Jun 24, 2026 | ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attack... |
| CVE-2026-9774 | MEDIUM | 6.5 | 1.2% | Jun 24, 2026 | ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote at... |
| CVE-2026-9773 | HIGH | 8.8 | 1.1% | Jun 24, 2026 | Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote at... |
| CVE-2026-9772 | HIGH | 8.8 | 1.1% | Jun 24, 2026 | Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote att... |
| CVE-2026-55762 | HIGH | 8.1 | 0.3% | Jun 24, 2026 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, ... |
| CVE-2026-55759 | HIGH | 7.4 | 0.2% | Jun 24, 2026 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, ... |
| CVE-2026-55666 | CRITICAL | 9.3 | 0.3% | Jun 24, 2026 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, ... |
| CVE-2026-55570 | CRITICAL | 9 | 0.3% | Jun 24, 2026 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, it does not escape the untrusted fields (... |
| CVE-2026-55455 | CRITICAL | 9.1 | 0.2% | Jun 24, 2026 | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the outbound HTTP host filte... |