CVE Vulnerability Database
Search and browse 397,848 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-49129 | MEDIUM | 6.9 | 0.3% | May 28, 2026 | Music Player Daemon (MPD) before version 0.24.11 contains a server-side request forgery vulnerability in CurlInputPlugin... |
| CVE-2026-49128 | HIGH | 8.7 | 0.5% | May 28, 2026 | Music Player Daemon (MPD) before version 0.24.11 contains a path traversal vulnerability in LocalStorage::MapFSOrThrow a... |
| CVE-2026-49127 | HIGH | 8.8 | 0.5% | May 28, 2026 | Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be f... |
| CVE-2026-42401 | MEDIUM | 5.4 | 0.1% | May 28, 2026 | Improper Neutralization of Input During Web Page Generation (CWE-79) in Kibana can lead to stored HTML injection. A user... |
| CVE-2026-33590 | HIGH | 8.5 | 0.5% | May 28, 2026 | Insecure default settings of Portainer CE grant regular (non-admin) users privileges that allow host filesystem access a... |
| CVE-2026-33464 | MEDIUM | 6.5 | 0.2% | May 28, 2026 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-13... |
| CVE-2026-33463 | MEDIUM | 5.3 | 0.2% | May 28, 2026 | Operation on a Resource after Expiration or Termination (CWE-672) in Kibana can lead to unauthorized information disclos... |
| CVE-2026-33462 | HIGH | 7.3 | 0.2% | May 28, 2026 | A path traversal vulnerability was identified in Kibana's dashboard management functionality. An authenticated user with... |
| CVE-2026-32847 | HIGH | 8.7 | 0.4% | May 28, 2026 | DeepCode through commit c991dc2 contains a path traversal vulnerability in the SPA catch-all route in new_ui/backend/mai... |
| CVE-2026-4944 | HIGH | 8.8 | 0.7% | May 28, 2026 | vllm-project/vllm version 0.14.1 contains a vulnerability where the `trust_remote_code=True` parameter is hardcoded in t... |
| CVE-2026-47337 | LOW | 3.3 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AF_INET... |
| CVE-2026-47336 | LOW | 3.3 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/AF_INET6 so... |
| CVE-2026-47335 | MEDIUM | 5.5 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8 contains SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor notificatio... |
| CVE-2026-47334 | MEDIUM | 5.5 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock in notifi... |
| CVE-2026-47333 | HIGH | 7.8 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an i... |
| CVE-2026-47332 | MEDIUM | 5.5 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an internal structu... |
| CVE-2026-47331 | HIGH | 7.8 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a linked list. An unprivile... |
| CVE-2026-47330 | LOW | 3.3 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an uninitializ... |
| CVE-2026-47329 | LOW | 3.3 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor n... |
| CVE-2026-47328 | MEDIUM | 6.1 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was not ... |
| CVE-2026-47327 | LOW | 3.3 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AppArmo... |
| CVE-2026-47326 | MEDIUM | 5.5 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory leak in the handling of big responses to AppArmor not... |
| CVE-2026-47136 | MEDIUM | 6.9 | 0.3% | May 28, 2026 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, the RustFS console endpoint GET /rus... |
| CVE-2026-46685 | MEDIUM | 6 | 0.1% | May 28, 2026 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, when RUSTFS_CORS_ALLOWED_ORIGINS is ... |
| CVE-2026-46526 | MEDIUM | 5 | 0.2% | May 28, 2026 | Local Deep Research is an AI-powered research assistant for deep, iterative research. Prior to 1.6.10, the URL checking ... |