CVE Vulnerability Database
Search and browse 397,925 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-8706 | MEDIUM | 6.5 | 0.2% | May 19, 2026 | Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same devi... |
| CVE-2026-5804 | HIGH | 8.4 | 0.2% | May 19, 2026 | An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit). T... |
| CVE-2026-37281 | CRITICAL | 9.8 | 1.6% | May 19, 2026 | An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remo... |
| CVE-2026-31072 | CRITICAL | 9.8 | 0.8% | May 19, 2026 | The JSONSerializer and CBORSerializer in APScheduler (all versions including 3.10.x and 4.0.0a5) are vulnerable to Remot... |
| CVE-2026-31071 | CRITICAL | 9.1 | 0.5% | May 19, 2026 | API endpoints in LalanaChami Pharmacy Management System (commit 5c3d028) lack authentication middleware. Unauthenticated... |
| CVE-2026-31070 | CRITICAL | 9.8 | 0.5% | May 19, 2026 | The LalanaChami Pharmacy Management System (commit 5c3d028) allows unauthenticated remote attackers to escalate privileg... |
| CVE-2026-31069 | HIGH | 8.8 | 0.4% | May 19, 2026 | BillaBear (all versions prior to Jan 2026) contains a SQL Injection vulnerability in the EventRepository. User-controlle... |
| CVE-2026-30118 | CRITICAL | 9.8 | 0.5% | May 19, 2026 | scalar/astro v0.1.13 was discovered to contain a Server-Side Request Forgery (SSRF) in the scalar_url query parameter of... |
| CVE-2026-30117 | CRITICAL | 9.8 | 0.5% | May 19, 2026 | scalar/astro v0.1.13 was discovered to contain an arbitrary file upload vulnerability in the the scalar_url query parame... |
| CVE-2026-8711 | CRITICAL | 9.8 | 0.9% | May 19, 2026 | NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled... |
| CVE-2026-47100 | HIGH | 8.7 | 0.5% | May 19, 2026 | Funnel Builder for WooCommerce Checkout prior to 3.15.0.3 contains a missing authorization vulnerability in the public c... |
| CVE-2026-45557 | MEDIUM | 6.9 | 0.4% | May 19, 2026 | Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in con... |
| CVE-2026-44159 | CRITICAL | 9.8 | 0.5% | May 19, 2026 | Tyler Identity Local (TID-L) uses documented, default administrative credentials. Users are not required to change the c... |
| CVE-2026-43634 | HIGH | 8.7 | 0.2% | May 19, 2026 | HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers ... |
| CVE-2026-34883 | MEDIUM | 5.3 | 0.1% | May 19, 2026 | An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors. On Windows, a ... |
| CVE-2026-2587 | CRITICAL | 9.6 | 0.6% | May 19, 2026 | A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used... |
| CVE-2026-2586 | CRITICAL | 9.1 | 0.8% | May 19, 2026 | An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user ... |
| CVE-2025-70950 | HIGH | 7.3 | 0.5% | May 19, 2026 | An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request. |
| CVE-2025-51427 | HIGH | 7.3 | 0.5% | May 19, 2026 | An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module listed in t... |
| CVE-2026-8975 | HIGH | 8.8 | 0.4% | May 19, 2026 | Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence... |
| CVE-2026-8974 | HIGH | 8.8 | 0.3% | May 19, 2026 | Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruptio... |
| CVE-2026-8973 | HIGH | 8.8 | 0.3% | May 19, 2026 | Memory safety bugs present in Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that w... |
| CVE-2026-8972 | HIGH | 8.8 | 0.3% | May 19, 2026 | Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 1... |
| CVE-2026-8971 | MEDIUM | 6.5 | 0.2% | May 19, 2026 | Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 151 and Thunderbird ... |
| CVE-2026-8970 | HIGH | 8.8 | 0.3% | May 19, 2026 | Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunder... |