CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-119144 | HIGH | 8.8 | 0.3% | Oct 29, 2026 | Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template injection vulnerability because... |
| CVE-2026-119143 | MEDIUM | 4.8 | 0.2% | Oct 29, 2026 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows guest code... |
| CVE-2026-119142 | MEDIUM | 4.8 | — | Oct 29, 2026 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability where dropping the Fut... |
| CVE-2026-119141 | MEDIUM | 5.3 | — | Oct 29, 2026 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious ... |
| CVE-2026-119140 | MEDIUM | 4.8 | 0.2% | Oct 29, 2026 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious ... |
| CVE-2026-119139 | MEDIUM | 4.8 | 0.2% | Oct 29, 2026 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::Func::call that rejec... |
| CVE-2026-119138 | MEDIUM | 4.8 | — | Oct 29, 2026 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows pending ca... |
| CVE-2026-119137 | MEDIUM | 5.3 | — | Oct 29, 2026 | Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a stack overflow vulnerability that allows guests to cra... |
| CVE-2026-119136 | MEDIUM | 4.8 | 0.2% | Oct 29, 2026 | Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insufficient checks in Store when mixing async-style and... |
| CVE-2026-119135 | MEDIUM | 4.8 | 0.2% | Oct 29, 2026 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the host reads a component model stream as a differen... |
| CVE-2026-119134 | MEDIUM | 6.2 | — | Oct 29, 2026 | Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 caps component-model resource handle tables only... |
| CVE-2026-119133 | LOW | 2.6 | — | Oct 29, 2026 | Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memory misalignment flaw in VMContext layout that caus... |
| CVE-2026-119132 | MEDIUM | 4.8 | 0.2% | Oct 29, 2026 | Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger... |
| CVE-2026-119131 | MEDIUM | 5.3 | 0.3% | Oct 29, 2026 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability in wasmtime-wasi-http ... |
| CVE-2026-119130 | LOW | 2.6 | — | Oct 29, 2026 | Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 does not verify that set-path-with-query values ... |
| CVE-2026-119129 | HIGH | 8.1 | — | Oct 29, 2026 | ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 contains a missing authorization vulnerability in Login V2 that all... |
| CVE-2026-119128 | HIGH | 7.4 | 0.3% | Oct 29, 2026 | ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticat... |
| CVE-2026-119127 | HIGH | 8.1 | 0.3% | Oct 29, 2026 | ZITADEL 4.0.0 before 4.19.5 contains a host header injection vulnerability in the Login V2 UI that allows unauthenticate... |
| CVE-2026-119126 | LOW | 3.1 | — | Oct 29, 2026 | Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 mishandles dot notation keys with null or undefined values w... |
| CVE-2026-119125 | LOW | 3.1 | — | Oct 29, 2026 | Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 returns the stored value of a field reverted by a beforeSave... |
| CVE-2026-119124 | MEDIUM | 5.5 | 0.1% | Oct 29, 2026 | ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause w... |
| CVE-2026-119123 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder... |
| CVE-2026-119122 | MEDIUM | 5.3 | — | Oct 29, 2026 | Crawl4AI before 0.9.5 contains a blind server-side request forgery vulnerability in the Docker server that allows API cl... |
| CVE-2026-119121 | MEDIUM | 4.3 | — | Oct 29, 2026 | Crawl4AI from 0.9.0 before 0.9.5 contains a JavaScript injection vulnerability in the Docker API server that allows auth... |
| CVE-2026-119120 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bod... |