CVE Vulnerability Database
Search and browse 420,253 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-119578 | HIGH | 7.8 | — | Oct 30, 2026 | MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows a... |
| CVE-2026-119577 | MEDIUM | 6.8 | — | Oct 30, 2026 | ArcadeDB before 26.10.2 contains an improper authorization vulnerability that allows revoked users to retain access thro... |
| CVE-2026-119576 | MEDIUM | 4.3 | 0.2% | Oct 30, 2026 | ArcadeDB from 21.12.1 before 26.10.2 contains an authorization bypass vulnerability that allows users with only readReco... |
| CVE-2026-119575 | MEDIUM | 6.5 | 0.3% | Oct 30, 2026 | ArcadeDB from 26.8.1 before 26.10.2 contains a server-side request forgery vulnerability that allows authenticated users... |
| CVE-2026-119574 | MEDIUM | 5.9 | 0.3% | Oct 30, 2026 | Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unauthenticated attacker... |
| CVE-2026-119573 | LOW | 3 | 0.3% | Oct 30, 2026 | Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the cr... |
| CVE-2026-119572 | HIGH | 8.7 | 0.2% | Oct 30, 2026 | Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX pr... |
| CVE-2026-119571 | LOW | 3.7 | 0.2% | Oct 30, 2026 | Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw that applies _Installation updates address... |
| CVE-2026-119570 | LOW | 3.1 | — | Oct 30, 2026 | Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that allows clients to re... |
| CVE-2026-119569 | MEDIUM | 5.3 | — | Oct 30, 2026 | Parse Server before 8.6.108 and 9.0.0 before 9.10.5-alpha.9 contains a prototype pollution vulnerability because user-co... |
| CVE-2026-119542 | MEDIUM | 4.3 | — | Oct 30, 2026 | A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested predicates can cause recursiv... |
| CVE-2026-119528 | HIGH | 7.8 | 0.2% | Oct 30, 2026 | A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying... |
| CVE-2026-118987 | MEDIUM | 5.3 | 0.2% | Oct 30, 2026 | CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie header. cook... |
| CVE-2026-118986 | HIGH | 7.5 | 0.2% | Oct 30, 2026 | CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand(). Th... |
| CVE-2026-117350 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue. |
| CVE-2026-117028 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::che... |
| CVE-2026-115683 | MEDIUM | 6.8 | 0.2% | Oct 30, 2026 | A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page. Epiphany regist... |
| CVE-2026-112348 | MEDIUM | 6.5 | 0.3% | Oct 30, 2026 | Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that allows unauthenticated attackers ... |
| CVE-2026-112347 | HIGH | 7.6 | — | Oct 30, 2026 | Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST API... |
| CVE-2026-111500 | MEDIUM | 5.4 | — | Oct 30, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerabili... |
| CVE-2026-111499 | MEDIUM | 5.5 | — | Oct 30, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource v... |
| CVE-2026-111498 | MEDIUM | 4.7 | — | Oct 30, 2026 | OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged a... |
| CVE-2026-100355 | LOW | 3.1 | 0.3% | Oct 30, 2026 | Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire message contains a link, the ser... |
| CVE-2026-91917 | HIGH | 8 | — | Oct 30, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability. A low privileg... |
| CVE-2026-87768 | HIGH | 7.5 | 0.2% | Oct 30, 2026 | DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. _normalize_l... |