CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-119204 | MEDIUM | 5.5 | 0.2% | Oct 29, 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can consume excessive memory while parsi... |
| CVE-2026-119203 | MEDIUM | 5.5 | 0.3% | Oct 29, 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop while opening... |
| CVE-2026-119202 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | @hapi/content provides HTTP Content-* header parsing. From 3.0.6 until 6.0.3, Content.disposition() uses an unanchored p... |
| CVE-2026-119201 | MEDIUM | 4.8 | 0.2% | Oct 29, 2026 | Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, nuxt dev stores a generated appSecr... |
| CVE-2026-119200 | MEDIUM | 6.5 | 0.3% | Oct 29, 2026 | Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, Nuxt resolves literal or percent-en... |
| CVE-2026-119199 | MEDIUM | 5.9 | 0.4% | Oct 29, 2026 | Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the Nuxt development server can exp... |
| CVE-2026-119198 | MEDIUM | 5.9 | 0.3% | Oct 29, 2026 | Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, a client with TCP access to an expo... |
| CVE-2026-92092 | HIGH | 7.4 | 0.2% | Oct 29, 2026 | A flaw was found in openshift-ansible. The installer container's `run` script downloads and executes remote inventory an... |
| CVE-2026-67205 | — | — | — | Oct 29, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-67203 | — | — | — | Oct 29, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-51832 | HIGH | 7.8 | 0.2% | Oct 29, 2026 | An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a ... |
| CVE-2026-51831 | HIGH | 7.8 | 0.2% | Oct 29, 2026 | An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a ... |
| CVE-2026-119197 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at ... |
| CVE-2026-119196 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copi... |
| CVE-2026-119195 | HIGH | 7.5 | 0.5% | Oct 29, 2026 | pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY decoding repe... |
| CVE-2026-119194 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | pyasn1 is a generic ASN.1 library for Python. From 0.3.3 until 0.6.5, schemaless container decoding stores every decoded... |
| CVE-2026-119193 | MEDIUM | 5.4 | 0.1% | Oct 29, 2026 | PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory() logic in src/Ru... |
| CVE-2026-119191 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the... |
| CVE-2026-119190 | HIGH | 7.4 | 0.2% | Oct 29, 2026 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, nod... |
| CVE-2026-119189 | MEDIUM | 5.9 | 0.2% | Oct 29, 2026 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, nod... |
| CVE-2026-119188 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the... |
| CVE-2026-119187 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the... |
| CVE-2026-119186 | MEDIUM | 5.9 | 0.2% | Oct 29, 2026 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, nod... |
| CVE-2026-9536 | HIGH | 7.5 | 0.3% | Oct 29, 2026 | A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (ve... |
| CVE-2026-9535 | HIGH | 8.2 | 0.3% | Oct 29, 2026 | A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A ... |