CVE Vulnerability Database

Search and browse 377,588 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-48007HIGH8.6Element Call is a native Matrix video conferencing application. Versions 0.5.17 through 0.19.3 report analytics data to ...
CVE-2026-47661HIGH8.7Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior ...
CVE-2026-47660HIGH8.7Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior ...
CVE-2026-47659HIGH8.7Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior ...
CVE-2026-19243MEDIUM6.3A security vulnerability has been detected in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool._guard_comman...
CVE-2026-19113MEDIUM5.3Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of servic...
CVE-2026-19017MEDIUM6.8Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read whe...
CVE-2026-19016MEDIUM4.2Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the {{session:write}} ACL permission...
CVE-2026-19015MEDIUM5.3Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are vulnerable to an uncontrolled resource consumptio...
CVE-2026-19014MEDIUM4.3Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumpti...
CVE-2026-19012MEDIUM5.3Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an authenticated denial of service...
CVE-2026-15972HIGH7.5Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of servi...
CVE-2026-15970MEDIUM4.2Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypa...
CVE-2026-71852MEDIUM4.8pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and larg...
CVE-2026-71851CRITICAL9crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in Crypt...
CVE-2026-71850MEDIUM4.8Hono is a Web application framework that provides support for any JavaScript runtime. From 3.8.0 to 4.12.33, memo() from...
CVE-2026-71849LOW3.7Hono is a Web application framework that provides support for any JavaScript runtime. From 4.7.0 to 4.12.33, the Proxy H...
CVE-2026-71848MEDIUM5.3Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the langua...
CVE-2026-71847HIGH8.7Ruby JSON is a JSON implementation for Ruby. From 2.20.0 until 2.21.2, Ruby's JSON native C extension clears the consume...
CVE-2026-70561HIGH7.1TestLink 1.9.20 and prior contains an insecure direct object reference vulnerability that allows any authenticated user,...
CVE-2026-69127MEDIUM6.9Kirby is an open-source content management system. Prior to 4.9.5 and from 5.0.0 through 5.5.1, the REST API error handl...
CVE-2026-66000LOW2.3Frappe is a full-stack web application framework. Prior to 16.23.0 and 15.112.0, Document Follow notification generation...
CVE-2026-48098HIGH7.3NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Vers...
CVE-2026-48097HIGH7.8NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Vers...
CVE-2026-19231HIGH7.3A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects ...