CVE Vulnerability Database
Search and browse 397,848 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-45297 | MEDIUM | 5.3 | 0.2% | May 28, 2026 | OpenReplay is a self-hosted session replay suite. Prior to 1.26.0, there is a cross-tenant IDOR on feature-flag and assi... |
| CVE-2026-45296 | HIGH | 7.7 | 0.2% | May 28, 2026 | OpenReplay is a self-hosted session replay suite. Prior to 1.26.0, OpenReplay's Python API exposes several app_apikey ro... |
| CVE-2026-45058 | CRITICAL | 9.4 | 0.2% | May 28, 2026 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In 3.8.8 and earlier, there is... |
| CVE-2026-45021 | MEDIUM | 5.1 | 0.2% | May 28, 2026 | Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs. Prior to 2.7.25, 2... |
| CVE-2026-44798 | HIGH | 7.1 | 0.3% | May 28, 2026 | Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, a user with access to ... |
| CVE-2026-44797 | HIGH | 8.5 | 0.2% | May 28, 2026 | Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot's Webhook dat... |
| CVE-2026-44796 | MEDIUM | 6.5 | 0.3% | May 28, 2026 | Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot UI object-bul... |
| CVE-2026-44794 | MEDIUM | 5.4 | 0.2% | May 28, 2026 | Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, in the case of inter-o... |
| CVE-2026-43898 | CRITICAL | 10 | 0.5% | May 28, 2026 | SandboxJS is a JavaScript sandboxing library. Prior to 0.9.6, sandbox-defined functions expose Function.caller, allowing... |
| CVE-2026-34126 | HIGH | 7.5 | 0.1% | May 28, 2026 | TP-Link has identified a vulnerability in Tapo L535E v1.0 and v3.0, Tapo P300 v1.0, and Tapo D100C v1.0, where Bluetooth... |
| CVE-2026-9098 | CRITICAL | 9.1 | 0.2% | May 28, 2026 | In Casdoor versions 2.362.0 and earlier, the SAML callback handler in controllers/auth.go accepts any well-formed SAMLRe... |
| CVE-2026-9097 | CRITICAL | 9.8 | 0.4% | May 28, 2026 | Casdoor versions 2.362.0 and earlier do not verify that a JWT used for token exchange is still active. The GetTokenExcha... |
| CVE-2026-9096 | HIGH | 7.5 | 0.3% | May 28, 2026 | Casdoor versions 2.362.0 and earlier do not enforce SAML assertion time bounds. The gosaml2 library reports all time-val... |
| CVE-2026-9095 | HIGH | 8.1 | 0.3% | May 28, 2026 | Casdoor versions 2.362.0 and earlier map SAML assertions to user sessions without replay protection. The ParseSamlRespon... |
| CVE-2026-9094 | CRITICAL | 9.8 | 0.4% | May 28, 2026 | Casdoor versions 2.362.0 and earlier contain a vulnerability enabling cross-organization token exchange. The GetTokenExc... |
| CVE-2026-9093 | CRITICAL | 9.8 | 0.4% | May 28, 2026 | In Casdoor versions 2.362.0 and earlier, the SAML service provider implementation does not validate the AudienceRestrict... |
| CVE-2026-9092 | CRITICAL | 9.1 | 0.3% | May 28, 2026 | Casdoor versions 2.362.0 and earlier contain a vulnerability involving unverified email binding that may enable account ... |
| CVE-2026-9091 | MEDIUM | 5.3 | 0.3% | May 28, 2026 | Casdoor versions 2.362.0 and earlier contain a logic flaw in the social‑login binding flow that allows users to bypass c... |
| CVE-2026-9090 | CRITICAL | 9.1 | 0.2% | May 28, 2026 | Casdoor versions 2.362.0 and earlier contain a vulnerability that allows an attacker to bypass authentication by supplyi... |
| CVE-2026-8697 | HIGH | 8.8 | 0.5% | May 28, 2026 | Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH service all... |
| CVE-2026-6720 | HIGH | 7.2 | 0.2% | May 28, 2026 | When calicoctl is invoked with --log-level=info or --log-level=debug, the client prints the full contents of its loaded ... |
| CVE-2026-47676 | MEDIUM | 5.3 | 0.3% | May 28, 2026 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, app.mount() stri... |
| CVE-2026-47675 | MEDIUM | 5.3 | 0.2% | May 28, 2026 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the serialize() ... |
| CVE-2026-47674 | MEDIUM | 5.3 | 0.2% | May 28, 2026 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the ip-restricti... |
| CVE-2026-47673 | MEDIUM | 6.5 | 0.2% | May 28, 2026 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the jwt and jwk ... |