CVE Vulnerability Database
Search and browse 420,251 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-95673 | — | — | — | Oct 30, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-92243. Reason: This candidate is a ... |
| CVE-2026-78403 | CRITICAL | 9.8 | 0.6% | Oct 30, 2026 | Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Ove... |
| CVE-2026-78402 | HIGH | 7.8 | 0.1% | Oct 30, 2026 | Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overf... |
| CVE-2026-62337 | MEDIUM | 6.9 | 0.3% | Oct 30, 2026 | SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points ... |
| CVE-2026-62335 | MEDIUM | 6.9 | 0.4% | Oct 30, 2026 | OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x lin... |
| CVE-2026-62334 | HIGH | 8.7 | 0.5% | Oct 30, 2026 | OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x lin... |
| CVE-2026-62333 | HIGH | 8.7 | 0.4% | Oct 30, 2026 | OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x lin... |
| CVE-2026-62302 | HIGH | 8.7 | 0.5% | Oct 30, 2026 | MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.10.3, `server.ts` calls `re... |
| CVE-2026-62301 | HIGH | 7.1 | 0.4% | Oct 30, 2026 | MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.10.3, backend video access ... |
| CVE-2026-62284 | HIGH | 8.6 | 0.5% | Oct 30, 2026 | OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy` `RemoteConfi... |
| CVE-2026-61850 | CRITICAL | 9.3 | 0.4% | Oct 30, 2026 | Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authori... |
| CVE-2026-61694 | LOW | 3.7 | 0.3% | Oct 30, 2026 | go-xrpl is a Go implementation of the XRP Ledger protocol. In versions through the June 18, 2026 revision identified by ... |
| CVE-2026-61620 | CRITICAL | 9.8 | 0.4% | Oct 30, 2026 | HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other a... |
| CVE-2026-61618 | MEDIUM | 6.9 | 0.4% | Oct 30, 2026 | SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accumulator public-instance limbs are decoded without ... |
| CVE-2026-55598 | CRITICAL | 9.1 | 0.3% | Oct 30, 2026 | PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user can... |
| CVE-2026-55493 | MEDIUM | 6.5 | 0.3% | Oct 30, 2026 | HotCRP is conference review software. Starting with 2.101, the `cmt:` search term checks whether a comment is visible to... |
| CVE-2026-55098 | MEDIUM | 6.5 | 0.3% | Oct 30, 2026 | Arc is an open, SQL-native time-series database for telemetry. Prior to the repository-verified 26.06.2 repair, the reme... |
| CVE-2026-119730 | MEDIUM | 4.3 | 0.2% | Oct 30, 2026 | Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers... |
| CVE-2026-119337 | HIGH | 7.1 | 0.3% | Oct 30, 2026 | RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. From 0.25.2 until 0.27.3, POST /api/v1/agents/cha... |
| CVE-2026-119336 | HIGH | 7.8 | 0.2% | Oct 30, 2026 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From ... |
| CVE-2026-119335 | HIGH | 7.8 | 0.2% | Oct 30, 2026 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior... |
| CVE-2026-119334 | LOW | 2.2 | 0.3% | Oct 30, 2026 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior... |
| CVE-2026-119333 | HIGH | 7.8 | 0.1% | Oct 30, 2026 | draw.io Desktop is the official Electron build of draw.io. Prior to 31.5.2, the Windows application launched powershell ... |
| CVE-2026-119332 | HIGH | 8.8 | 0.2% | Oct 30, 2026 | Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964, FinalizationRegistry::cl... |
| CVE-2026-119331 | HIGH | 7.1 | 0.2% | Oct 30, 2026 | Ladybird is a truly independent web browser. Prior to the c0d68bddf3e3616e5173835f0f4c155ee9700d91 commit, CSSStyleSheet... |