CVE Vulnerability Database

Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-61654HIGH8.3Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook...
CVE-2026-61645CRITICAL9.1Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vul...
CVE-2026-45049HIGH8.3Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cross-Domain Single Sign-On` (`C...
CVE-2026-119317MEDIUM6.5On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the ...
CVE-2026-119286HIGH7.5GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, validate() reuses a ...
CVE-2026-119285MEDIUM5.9Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware's validateDomain...
CVE-2026-119284MEDIUM6.9joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standar...
CVE-2026-119283HIGH7.5joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standar...
CVE-2026-119282HIGH7.3Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and ...
CVE-2026-115943CRITICAL9.8Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in Exce...
CVE-2026-61576HIGH8.3Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook...
CVE-2026-13303HIGH8.7HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store...
CVE-2026-119325HIGH7.5Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_po...
CVE-2026-119281MEDIUM5.9MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3...
CVE-2026-119280LOW3.7MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3...
CVE-2026-119279MEDIUM5.9MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3...
CVE-2026-119278MEDIUM5.9MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3...
CVE-2026-119277MEDIUM5.9MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3...
CVE-2026-119276MEDIUM5.9MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3...
CVE-2026-119210MEDIUM5.9MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3...
CVE-2026-119209MEDIUM5.5pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory while openi...
CVE-2026-119208MEDIUM5.5pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive time and memory wh...
CVE-2026-119207MEDIUM5.5pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict...
CVE-2026-119206MEDIUM5.5pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can take excessive time to retrieve page...
CVE-2026-119205MEDIUM5.5pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop when cloning ...