CVE Vulnerability Database
Search and browse 397,840 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-47740 | HIGH | 8.1 | 0.3% | May 29, 2026 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, Multiple Filament actions on the admin Order detail and Or... |
| CVE-2026-46372 | HIGH | 8.5 | 0.9% | May 29, 2026 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode... |
| CVE-2026-46344 | MEDIUM | 5.3 | 0.3% | May 29, 2026 | liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prio... |
| CVE-2026-44652 | MEDIUM | 6.9 | 0.4% | May 29, 2026 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode... |
| CVE-2026-44651 | MEDIUM | 6.9 | 0.3% | May 29, 2026 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode... |
| CVE-2026-44650 | CRITICAL | 9.1 | 0.6% | May 29, 2026 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode... |
| CVE-2026-44649 | CRITICAL | 9.8 | 0.2% | May 29, 2026 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode... |
| CVE-2026-44648 | HIGH | 7.5 | 0.4% | May 29, 2026 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode... |
| CVE-2026-44611 | MEDIUM | 5.9 | 0.1% | May 29, 2026 | Danelec MacGregor Voyage Data Recorder passwords are stored with a hashing method which limits password length and is su... |
| CVE-2026-44518 | MEDIUM | 5.3 | 0.3% | May 29, 2026 | liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prio... |
| CVE-2026-42951 | MEDIUM | 5.9 | 0.2% | May 29, 2026 | An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device which includes accoun... |
| CVE-2026-42941 | HIGH | 8.7 | 0.2% | May 29, 2026 | The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password c... |
| CVE-2026-42929 | HIGH | 8.7 | 0.2% | May 29, 2026 | Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials. |
| CVE-2026-40425 | MEDIUM | 4.9 | 0.4% | May 29, 2026 | The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive file... |
| CVE-2026-7786 | CRITICAL | 9.8 | 0.4% | May 29, 2026 | Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintex... |
| CVE-2026-6824 | HIGH | 8.4 | 0.4% | May 29, 2026 | A stored cross-site scripting (XSS) vulnerability exists in certain 1xxx series NVR devices due to insufficient sanitiza... |
| CVE-2026-5768 | HIGH | 8.8 | 0.3% | May 29, 2026 | The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT characteristics without enforcing p... |
| CVE-2026-5386 | CRITICAL | 9.1 | 0.6% | May 29, 2026 | The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an ... |
| CVE-2026-47179 | HIGH | 7.7 | 0.3% | May 29, 2026 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.4, ProjectService.Ge... |
| CVE-2026-47125 | HIGH | 8.8 | 0.2% | May 29, 2026 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.2, the PUT /api/envi... |
| CVE-2026-45668 | CRITICAL | 9.3 | 0.2% | May 29, 2026 | Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bas... |
| CVE-2026-45661 | CRITICAL | 9.9 | 0.7% | May 29, 2026 | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical path traversal vulnerab... |
| CVE-2026-45660 | MEDIUM | 5.4 | 0.2% | May 29, 2026 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.22 and 6.18.1, the Glide image prox... |
| CVE-2026-45633 | CRITICAL | 9.9 | 0.9% | May 29, 2026 | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.6 and earlier, Dokploy contains a command injecti... |
| CVE-2026-45632 | CRITICAL | 9.9 | 0.3% | May 29, 2026 | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.7 and earlier, the schedule router does not enfor... |