CVE Vulnerability Database
Search and browse 396,317 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-33113 | MEDIUM | 6.1 | 0.5% | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-32193 | HIGH | 8.8 | 0.3% | Jun 9, 2026 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service all... |
| CVE-2026-28301 | MEDIUM | 4.8 | 0.2% | Jun 9, 2026 | A vulnerability in which an attacker can provide a crafted external URL that may redirect a user to an unintended websit... |
| CVE-2026-26142 | CRITICAL | 9.8 | 1.9% | Jun 9, 2026 | Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network. |
| CVE-2026-24181 | HIGH | 7.3 | 0.1% | Jun 9, 2026 | NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation. A succes... |
| CVE-2026-24180 | HIGH | 7.3 | 0.2% | Jun 9, 2026 | NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffer overflow. A succes... |
| CVE-2026-22926 | HIGH | 7.8 | 0.1% | Jun 9, 2026 | Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability. |
| CVE-2026-0420 | MEDIUM | 5.9 | 0.1% | Jun 9, 2026 | An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which co... |
| CVE-2026-0419 | HIGH | 8 | 0.3% | Jun 9, 2026 | Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows u... |
| CVE-2026-0418 | MEDIUM | 4.5 | 0.2% | Jun 9, 2026 | Insufficient configuration management in the listed devices allows authenticated administrators connected to the local n... |
| CVE-2026-0417 | MEDIUM | 4.5 | 0.2% | Jun 9, 2026 | Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected ... |
| CVE-2026-0416 | MEDIUM | 4.5 | 0.2% | Jun 9, 2026 | An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated admini... |
| CVE-2026-0415 | MEDIUM | 4.5 | 0.2% | Jun 9, 2026 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected t... |
| CVE-2026-0414 | MEDIUM | 4.5 | 0.2% | Jun 9, 2026 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected t... |
| CVE-2026-0413 | MEDIUM | 4.5 | 0.3% | Jun 9, 2026 | A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated a... |
| CVE-2026-0412 | MEDIUM | 4.5 | 0.2% | Jun 9, 2026 | Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in ... |
| CVE-2026-0411 | HIGH | 8 | 0.3% | Jun 9, 2026 | An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected... |
| CVE-2026-0410 | MEDIUM | 4.5 | 0.2% | Jun 9, 2026 | Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorize... |
| CVE-2026-0409 | MEDIUM | 6.4 | 0.3% | Jun 9, 2026 | A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the rout... |
| CVE-2026-8045 | MEDIUM | 6.5 | 0.2% | Jun 9, 2026 | CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosu... |
| CVE-2026-8025 | CRITICAL | 9.8 | 0.3% | Jun 9, 2026 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in MOSK Information T... |
| CVE-2026-49948 | HIGH | 8.6 | 0.3% | Jun 9, 2026 | Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the self-hosted s... |
| CVE-2026-49938 | MEDIUM | 6.5 | 0.2% | Jun 9, 2026 | A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, Fo... |
| CVE-2026-25089 | CRITICAL | 9.8 | 36.1% | Jun 9, 2026 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F... |
| CVE-2026-24065 | HIGH | 8.1 | 0.3% | Jun 9, 2026 | Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability in the privile... |