CVE Vulnerability Database
Search and browse 397,684 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-36727 | CRITICAL | 9.1 | 0.4% | Jun 9, 2026 | An insecure authentication vulnerability in the /api/social-sign-in endpoint of bookcars v8.3 allows attackers to bypass... |
| CVE-2026-36726 | MEDIUM | 5.3 | 0.5% | Jun 9, 2026 | An arbitrary file deletion vulnerability in the /api/delete-temp-license/{file} endpoint of bookcars v8.3 allows unauthe... |
| CVE-2026-36725 | MEDIUM | 6.1 | 0.2% | Jun 9, 2026 | A markdown based cross-site scripting (XSS) vulnerability in the /system/notice/create endpoint of FastapiAdmin v2.2.0 a... |
| CVE-2026-36724 | MEDIUM | 6.5 | 0.3% | Jun 9, 2026 | An uncaught exception in the /application/job/update/{id} endpoint of FastapiAdmin v2.2.0 allows authenticated attackers... |
| CVE-2026-36723 | HIGH | 8.8 | 1.0% | Jun 9, 2026 | An unrestricted file rename vulnerability in the /api/create-user component of bookcars v8.3 allows authenticated attack... |
| CVE-2026-36722 | MEDIUM | 5.4 | 0.2% | Jun 9, 2026 | An authenticated arbitrary file upload vulnerability in the /api/create-car-image component of bookcars v8.3 allows atta... |
| CVE-2026-36721 | CRITICAL | 9.8 | 0.3% | Jun 9, 2026 | A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to ... |
| CVE-2026-36720 | HIGH | 8.1 | 0.2% | Jun 9, 2026 | Insecure permissions in bookcars v8.3 allows authenticated attackers to escalate privileges from user to admin via modif... |
| CVE-2026-36719 | HIGH | 7.5 | 0.3% | Jun 9, 2026 | An information disclosure vulnerability in the /api/v1/user/info endpoint of AgentChat v2.3.0 allows unauthenticated att... |
| CVE-2026-30141 | CRITICAL | 9.8 | 0.6% | Jun 9, 2026 | An issue was discovered in bitbank2 AnimatedGIF v2.2.0. A buffer overflow in the DecodeLZW function allows remote attack... |
| CVE-2026-10045 | CRITICAL | 9.8 | 0.2% | Jun 9, 2026 | Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded ... |
| CVE-2025-55659 | MEDIUM | 6.5 | 0.3% | Jun 9, 2026 | A NULL pointer dereference in the ctts_box_write function (isomedia/box_code_base.c) of GPAC MP4Box v2.4 allows attacker... |
| CVE-2025-55658 | MEDIUM | 6.5 | 0.3% | Jun 9, 2026 | GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_opus_parse_packet_header function (media... |
| CVE-2025-55657 | HIGH | 7.5 | 0.5% | Jun 9, 2026 | A NULL pointer dereference in the gf_odf_vvc_cfg_write_bs function (odf/descriptors.c) of GPAC MP4Box v2.4 allows attack... |
| CVE-2025-55651 | MEDIUM | 5.5 | 0.2% | Jun 9, 2026 | A NULL pointer dereference in the gf_isom_get_user_data_count function (isomedia/isom_read.c) of GPAC MP4Box v2.4 allows... |
| CVE-2025-52293 | HIGH | 7.5 | 0.5% | Jun 9, 2026 | A segmentation violaton in the gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allo... |
| CVE-2025-52292 | HIGH | 7.5 | 0.5% | Jun 9, 2026 | A stack buffer overflow in the filein_process function (in_file.c) of GPAC MP4Box v2.4 allows attackers to cause a Denia... |
| CVE-2023-43688 | HIGH | 7.5 | 0.2% | Jun 9, 2026 | An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). There is a Heap buffer overflow i... |
| CVE-2023-43686 | MEDIUM | 6.2 | 0.1% | Jun 9, 2026 | An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). A large number of Firefox prefere... |
| CVE-2023-29146 | HIGH | 8.2 | 0.1% | Jun 9, 2026 | The utility functions used by Malwarebytes EDR 1.0.11 on Linux for calculating a cryptographic hash of data bytes trunca... |
| CVE-2026-50636 | HIGH | 8.8 | 0.4% | Jun 9, 2026 | The RemoteControl API methods invite_participants and remind_participants pass a caller-supplied token-ID array into Tok... |
| CVE-2026-50635 | HIGH | 8.8 | 0.4% | Jun 9, 2026 | LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it. The ... |
| CVE-2026-50512 | HIGH | 7.8 | 0.3% | Jun 9, 2026 | Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges... |
| CVE-2026-50511 | HIGH | 7.8 | 0.3% | Jun 9, 2026 | Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to ... |
| CVE-2026-48293 | HIGH | 7.8 | 0.1% | Jun 9, 2026 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could resul... |