CVE Vulnerability Database
Search and browse 394,557 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-56371 | MEDIUM | 5.3 | 0.2% | Jun 23, 2026 | ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when processing TXT files with texture ... |
| CVE-2026-56322 | HIGH | 8.7 | 0.3% | Jun 23, 2026 | Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /updates endpoint that res... |
| CVE-2026-56315 | CRITICAL | 9.8 | 0.8% | Jun 23, 2026 | picklescan before 1.0.4 fails to block at least seven Python standard library modules (including uuid, _osx_support, _ai... |
| CVE-2026-56301 | MEDIUM | 6.8 | 0.1% | Jun 23, 2026 | Nuxt 4.0.0 before 4.4.7 and 3.18.0 before 3.21.7, when running the development server (nuxt dev) on Linux, binds the vit... |
| CVE-2026-56275 | HIGH | 7.1 | 0.2% | Jun 23, 2026 | Flowise before 3.1.0 contains a server-side request forgery vulnerability in the Execute Flow node that allows attackers... |
| CVE-2026-56274 | CRITICAL | 9.9 | 2.7% | Jun 23, 2026 | Flowise before 3.1.2 contains multiple OS command injection vulnerabilities in the Custom MCP Server feature due to inco... |
| CVE-2026-56263 | MEDIUM | 6.1 | 0.2% | Jun 23, 2026 | Crawl4AI before 0.8.7 contains a stored cross-site scripting vulnerability in the monitor dashboard that renders crawl U... |
| CVE-2026-56258 | CRITICAL | 9.2 | 0.7% | Jun 23, 2026 | Crawl4AI before 0.8.8 contains an arbitrary file write vulnerability in the screenshot and PDF endpoints that allows una... |
| CVE-2026-56248 | HIGH | 8.7 | 0.4% | Jun 23, 2026 | Cap-go capgo (capgo-backend) before 12.128.12 contains an unauthenticated denial-of-service vulnerability arising from t... |
| CVE-2026-56243 | HIGH | 8.6 | 0.3% | Jun 23, 2026 | Capgo before 12.128.2 contains a security control bypass vulnerability where the PostgREST/RLS plane accepts plaintext A... |
| CVE-2026-56234 | MEDIUM | 6.9 | 0.2% | Jun 23, 2026 | Capgo before 12.128.2 contains a credential validation vulnerability in the POST /functions/v1/private/validate_password... |
| CVE-2026-56225 | HIGH | 8.7 | 0.3% | Jun 23, 2026 | Capgo before 12.128.2 contains an authorization bypass vulnerability in its public API key management handlers (get/put/... |
| CVE-2026-56222 | HIGH | 8.6 | 0.4% | Jun 23, 2026 | Capgo before 12.128.2 contains an authorization bypass vulnerability in POST /private/role_bindings that fails to verify... |
| CVE-2026-54892 | HIGH | 8.7 | 0.7% | Jun 23, 2026 | Inefficient algorithmic complexity in Plug's nested-parameter decoder allows an unauthenticated remote attacker to cause... |
| CVE-2026-4610 | MEDIUM | 6.4 | 0.2% | Jun 23, 2026 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Stored Cross-Site Scriptin... |
| CVE-2026-44089 | CRITICAL | 9.4 | 0.2% | Jun 23, 2026 | Totolink EX1200L router is vulnerable to Buffer Overflow in the login functionality in cgi-bin/cstecgi.cgi endpoint. Thi... |
| CVE-2026-10857 | MEDIUM | 6.1 | 0.1% | Jun 23, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in AKIN Software Comp... |
| CVE-2026-10711 | HIGH | 8.8 | 0.2% | Jun 23, 2026 | Missing authentication for critical function vulnerability in AKIN Software Computer Import Export Industry and Trade Lt... |
| CVE-2025-71376 | HIGH | 8.1 | 0.3% | Jun 23, 2026 | picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.autocomplete.AutoComplete.fetch_completion... |
| CVE-2025-71370 | HIGH | 8.1 | 0.4% | Jun 23, 2026 | picklescan before 0.0.28 fails to detect malicious torch.jit.unsupported_tensor_ops.execWrapper function calls embedded ... |
| CVE-2025-71365 | HIGH | 8.1 | 0.3% | Jun 23, 2026 | picklescan before 0.0.33 fails to detect malicious pickle files that invoke numpy.f2py.crackfortran.myeval function thro... |
| CVE-2025-71341 | HIGH | 8.1 | 0.5% | Jun 23, 2026 | picklescan before 0.0.29 fails to detect the profile.Profile.runctx function when analyzing pickle files, allowing attac... |
| CVE-2025-71337 | HIGH | 8.7 | 0.3% | Jun 23, 2026 | Flowise before 3.0.10 (affected versions 3.0.7 and earlier) contains an unverified email change vulnerability. An authen... |
| CVE-2023-54365 | HIGH | 8.7 | 0.6% | Jun 23, 2026 | Traefik before 2.10.5 and 3.0.0-beta4 is affected by a denial-of-service vulnerability in HTTP/2 request handling inheri... |
| CVE-2026-4983 | MEDIUM | 5.4 | 0.2% | Jun 23, 2026 | Open VSX Registry does not sanitize SVG files uploaded as extension icons prior to storage, and serves them with Content... |