CVE Vulnerability Database
Search and browse 394,376 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-13164 | HIGH | 8.8 | 0.4% | Jun 24, 2026 | Missing Authentication for Critical Function (CWE-306) in the RegisterView (apps/accounts/views.py), exposed at POST /ap... |
| CVE-2026-56121 | CRITICAL | 9.8 | 1.4% | Jun 24, 2026 | Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attacke... |
| CVE-2026-56119 | — | — | — | Jun 24, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-56118 | — | — | — | Jun 24, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-56111 | CRITICAL | 9.1 | 0.5% | Jun 24, 2026 | Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESH_BED_LEVELING enabled, contains an out-of-... |
| CVE-2026-55488 | HIGH | 7.7 | 0.6% | Jun 24, 2026 | motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program w... |
| CVE-2026-50712 | MEDIUM | 4.8 | 0.2% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutrali... |
| CVE-2026-50711 | MEDIUM | 4.6 | 0.3% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutrali... |
| CVE-2026-50710 | MEDIUM | 4.6 | 0.3% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to unsafe evaluation... |
| CVE-2026-50709 | MEDIUM | 4.8 | 0.2% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutrali... |
| CVE-2026-50708 | MEDIUM | 4.8 | 0.2% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutrali... |
| CVE-2026-50705 | MEDIUM | 4.6 | 0.3% | Jun 24, 2026 | A Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization ... |
| CVE-2026-50704 | MEDIUM | 4.6 | 0.3% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutrali... |
| CVE-2026-50703 | MEDIUM | 4.8 | 0.2% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutrali... |
| CVE-2026-50701 | MEDIUM | 5.1 | 0.3% | Jun 24, 2026 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutr... |
| CVE-2026-50700 | MEDIUM | 4.6 | 0.3% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutrali... |
| CVE-2026-49269 | HIGH | 8.6 | 0.3% | Jun 24, 2026 | Apple M1 GPUs retain register file data between compute shader dispatches from different processes. A sandboxed Metal at... |
| CVE-2026-50699 | MEDIUM | 4.6 | 0.3% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev. An authenticated attack... |
| CVE-2026-50698 | MEDIUM | 4.6 | 0.3% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutrali... |
| CVE-2026-12986 | HIGH | 7.3 | 0.2% | Jun 24, 2026 | A critical vulnerability in Admin GUI in Payara Server Full 4.x, 5.x, 6.x, 7.x, 7.2026.x, 6.2025.x, 6.2024.x on All plat... |
| CVE-2026-11878 | MEDIUM | 6.1 | 0.2% | Jun 24, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Ma... |
| CVE-2026-11877 | HIGH | 7.5 | 0.2% | Jun 24, 2026 | An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue aff... |
| CVE-2026-57307 | MEDIUM | 4.2 | 0.1% | Jun 24, 2026 | A missing permission check in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allows attackers with Ove... |
| CVE-2026-57306 | MEDIUM | 4.2 | 0.1% | Jun 24, 2026 | A cross-site request forgery (CSRF) vulnerability in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier al... |
| CVE-2026-57305 | MEDIUM | 5.4 | 0.1% | Jun 24, 2026 | A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Plugin 1.4 and earlier allows attackers to connect... |