CVE Vulnerability Database
Search and browse 394,603 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-50170 | HIGH | 7.5 | 0.3% | Jun 22, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-50169 | MEDIUM | 6.1 | 0.2% | Jun 22, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-50168 | HIGH | 8.2 | 0.2% | Jun 22, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-49356 | LOW | 3.6 | 0.1% | Jun 22, 2026 | Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an a... |
| CVE-2026-48712 | HIGH | 7.5 | 0.3% | Jun 22, 2026 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.1 and 8.4.1, protobufjs could recu... |
| CVE-2026-46417 | MEDIUM | 6.1 | 0.2% | Jun 22, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-42127 | HIGH | 7.5 | 0.4% | Jun 22, 2026 | The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attacke... |
| CVE-2026-12249 | CRITICAL | 9 | 0.1% | Jun 22, 2026 | An issue was discovered in Canonical ADSys upstream versions through v0.16.2. During Active Directory Certificate Servic... |
| CVE-2026-11994 | MEDIUM | 4.8 | 0.3% | Jun 22, 2026 | Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow. ... |
| CVE-2026-11825 | — | — | — | Jun 22, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2026-10789 | CRITICAL | 9.6 | 0.3% | Jun 22, 2026 | A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled... |
| CVE-2026-9610 | MEDIUM | 5.3 | 0.1% | Jun 22, 2026 | IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality... |
| CVE-2026-9320 | HIGH | 7.5 | 0.3% | Jun 22, 2026 | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 a... |
| CVE-2026-9072 | CRITICAL | 9.8 | 0.4% | Jun 22, 2026 | IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with t... |
| CVE-2026-9071 | HIGH | 7.5 | 0.3% | Jun 22, 2026 | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 a... |
| CVE-2026-9006 | CRITICAL | 9.1 | 0.2% | Jun 22, 2026 | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy co... |
| CVE-2026-8934 | MEDIUM | 6.9 | 0.4% | Jun 22, 2026 | A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud C... |
| CVE-2026-8858 | HIGH | 8.8 | 0.3% | Jun 22, 2026 | IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution an... |
| CVE-2026-8823 | LOW | 3.8 | 0.2% | Jun 22, 2026 | Mattermost versions 11.7.x <= 11.7.0, 10.11.x <= 10.11.17 fail to validate bot targets when demoting users to guests whi... |
| CVE-2026-8646 | CRITICAL | 9.1 | 0.3% | Jun 22, 2026 | IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 ar... |
| CVE-2026-8636 | HIGH | 7.5 | 0.1% | Jun 22, 2026 | IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve use... |
| CVE-2026-8059 | MEDIUM | 6.1 | 0.1% | Jun 22, 2026 | IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site script... |
| CVE-2026-7664 | CRITICAL | 9.8 | 0.3% | Jun 22, 2026 | IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and... |
| CVE-2026-7253 | MEDIUM | 6 | 0.2% | Jun 22, 2026 | IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send ... |
| CVE-2026-56104 | HIGH | 8.8 | 0.3% | Jun 22, 2026 | Chainlit before 2.10.1 contains a session hijacking vulnerability that allows unauthenticated attackers to restore and i... |