CVE Vulnerability Database
Search and browse 394,603 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-54268 | HIGH | 7.5 | 0.3% | Jun 22, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-54267 | MEDIUM | 6.1 | 0.2% | Jun 22, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-54266 | MEDIUM | 6.1 | 0.1% | Jun 22, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-54265 | MEDIUM | 6.1 | 0.2% | Jun 22, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-54264 | MEDIUM | 6.1 | 0.2% | Jun 22, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-53655 | MEDIUM | 5.5 | 0.1% | Jun 22, 2026 | node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (node-tar) applies a PAX extended header's size= recor... |
| CVE-2026-53550 | MEDIUM | 5.3 | 0.3% | Jun 22, 2026 | js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithm... |
| CVE-2026-52725 | MEDIUM | 6.1 | 0.2% | Jun 22, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-50557 | MEDIUM | 6.1 | 0.2% | Jun 22, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-50178 | HIGH | 8.8 | 0.2% | Jun 22, 2026 | The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. the client-side... |
| CVE-2026-49241 | HIGH | 8.8 | 0.2% | Jun 22, 2026 | The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4... |
| CVE-2026-41049 | HIGH | 7.1 | 0.1% | Jun 22, 2026 | Incorrect caching of authentication between different users of the qSnapper dbus service before version 1.3.3 allowed a... |
| CVE-2026-41048 | HIGH | 7.1 | 0.1% | Jun 22, 2026 | Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local at... |
| CVE-2026-41047 | MEDIUM | 5.5 | 0.1% | Jun 22, 2026 | Lack of authentication when using the "snapshot diff" functions in qSnapper before version 1.3.3 allowed a local attacke... |
| CVE-2026-41046 | HIGH | 7.3 | 0.2% | Jun 22, 2026 | A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to... |
| CVE-2026-41045 | HIGH | 7 | 0.1% | Jun 22, 2026 | A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass... |
| CVE-2026-12725 | MEDIUM | 5.9 | 0.5% | Jun 22, 2026 | A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of... |
| CVE-2026-12628 | CRITICAL | 9.1 | 0.4% | Jun 22, 2026 | IBM Storage Protect Client 8.1.0.0 through 8.2.1.0 and IBM Storage Protect Snapshot For Windows 8.1.0.0 through 8.2.1.0 ... |
| CVE-2026-12549 | MEDIUM | 4.8 | 0.3% | Jun 22, 2026 | The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a gene... |
| CVE-2026-12479 | MEDIUM | 6.1 | 0.3% | Jun 22, 2026 | A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the `DiskIOStore.make` method ... |
| CVE-2026-11943 | MEDIUM | 4.8 | 0.3% | Jun 22, 2026 | Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on i... |
| CVE-2026-11942 | MEDIUM | 4.8 | 0.3% | Jun 22, 2026 | Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the reusable delete confirmation... |
| CVE-2026-11372 | MEDIUM | 5.4 | 0.2% | Jun 22, 2026 | IBM TRIRIGA Application Platform 5.0.2 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an... |
| CVE-2026-10845 | HIGH | 7.3 | 0.3% | Jun 22, 2026 | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorize... |
| CVE-2024-51454 | MEDIUM | 6.1 | 0.2% | Jun 22, 2026 | IBM Engineering Workflow Management 7.0.2 through 7.0.2 Interim Fix 035, 7.0.3 through 7.0.3 Interim Fix 017, and 7.1 th... |