CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-8824 | HIGH | 7.5 | 0.3% | Oct 29, 2026 | A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s)... |
| CVE-2026-8822 | HIGH | 7.5 | 0.3% | Oct 29, 2026 | A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A sp... |
| CVE-2026-6877 | MEDIUM | 5.3 | 0.3% | Oct 29, 2026 | ServiceNow has addressed a domain separation bypass security issue that was identified in the ServiceNow SR – CSM – Task... |
| CVE-2026-58120 | — | — | — | Oct 29, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-58119 | — | — | — | Oct 29, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-58118 | — | — | — | Oct 29, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-42057 | HIGH | 7.5 | 0.3% | Oct 29, 2026 | An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A... |
| CVE-2026-41216 | HIGH | 7.5 | 0.3% | Oct 29, 2026 | An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A ... |
| CVE-2026-119251 | MEDIUM | 6.7 | 0.1% | Oct 29, 2026 | A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in ... |
| CVE-2026-119250 | HIGH | 7.8 | 0.3% | Oct 29, 2026 | A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerabil... |
| CVE-2026-119249 | HIGH | 7.5 | 0.3% | Oct 29, 2026 | A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found i... |
| CVE-2026-119168 | HIGH | 8.8 | 0.1% | Oct 29, 2026 | HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration th... |
| CVE-2026-118782 | HIGH | 7.5 | 0.1% | Oct 29, 2026 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, nod... |
| CVE-2026-118781 | LOW | 2.9 | 0.1% | Oct 29, 2026 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the... |
| CVE-2026-118780 | LOW | 3.7 | 0.2% | Oct 29, 2026 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the... |
| CVE-2026-118779 | HIGH | 7.5 | 0.6% | Oct 29, 2026 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the... |
| CVE-2026-118778 | MEDIUM | 5.9 | 0.2% | Oct 29, 2026 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the... |
| CVE-2026-118777 | MEDIUM | 6.5 | 0.3% | Oct 29, 2026 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the... |
| CVE-2026-118776 | MEDIUM | 5.3 | 0.1% | Oct 29, 2026 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the... |
| CVE-2026-118775 | MEDIUM | 5.3 | 0.3% | Oct 29, 2026 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, asn... |
| CVE-2026-118774 | MEDIUM | 5.3 | 0.1% | Oct 29, 2026 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the... |
| CVE-2026-118773 | MEDIUM | 6.3 | 0.4% | Oct 29, 2026 | Glob matches files using patterns the shell uses. From 9.0.0 until 14.0.2, abort branches in src/walker.ts, including Gl... |
| CVE-2026-118772 | HIGH | 7.5 | 0.5% | Oct 29, 2026 | joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 and 18.3.1, the Joi.st... |
| CVE-2026-103094 | HIGH | 7.1 | 0.3% | Oct 29, 2026 | ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform. Thi... |
| CVE-2026-103093 | CRITICAL | 9.4 | 0.4% | Oct 29, 2026 | ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulner... |