CVE Vulnerability Database
Search and browse 397,933 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-45187 | MEDIUM | 6.5 | 0.5% | May 19, 2026 | Improper Authorization vulnerability in Apache OFBiz Webtools. This issue affects Apache OFBiz: before 24.09.06. Users... |
| CVE-2026-41919 | CRITICAL | 9.1 | 0.5% | May 19, 2026 | Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache OFBiz. Thi... |
| CVE-2026-35086 | MEDIUM | 6.5 | 0.5% | May 19, 2026 | Improper Control of Generation of Code ('Code Injection') vulnerability in email services of Apache OFBiz. This issue a... |
| CVE-2026-31986 | CRITICAL | 9.1 | 0.4% | May 19, 2026 | Use of Hard-coded Cryptographic Key vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. U... |
| CVE-2026-31910 | HIGH | 7.5 | 0.5% | May 19, 2026 | Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Us... |
| CVE-2026-31909 | HIGH | 7.5 | 0.5% | May 19, 2026 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache OFBiz. This issue affects Apache OFB... |
| CVE-2026-31906 | MEDIUM | 6.1 | 0.4% | May 19, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache OFBiz. Thi... |
| CVE-2026-31388 | MEDIUM | 5.3 | 0.4% | May 19, 2026 | Improper Access Control vulnerability in Apache OFBiz in multi-tenant deployments. This issue affects Apache OFBiz: bef... |
| CVE-2026-31387 | MEDIUM | 5.3 | 0.5% | May 19, 2026 | Improper Authentication vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are rec... |
| CVE-2026-31380 | MEDIUM | 6.5 | 0.5% | May 19, 2026 | Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') v... |
| CVE-2026-31379 | MEDIUM | 6.1 | 0.6% | May 19, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Limitation of a Pathname ... |
| CVE-2026-31378 | MEDIUM | 6.5 | 0.6% | May 19, 2026 | Improper Input Validation vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are r... |
| CVE-2026-2611 | CRITICAL | 9.6 | 0.4% | May 19, 2026 | In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. ... |
| CVE-2026-29226 | HIGH | 7.3 | 0.5% | May 19, 2026 | Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz via Content component operations. This issue affects A... |
| CVE-2026-29220 | MEDIUM | 6.5 | 0.7% | May 19, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issu... |
| CVE-2026-29207 | MEDIUM | 6.5 | 0.5% | May 19, 2026 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects... |
| CVE-2026-44408 | MEDIUM | 6.3 | 0.3% | May 19, 2026 | There is an unauthorized access vulnerability in ZTE MU5250. Due to improper permission control of the Web interface, an... |
| CVE-2026-8922 | MEDIUM | 5.4 | 0.3% | May 19, 2026 | A flaw was found in Keycloak. When both realm-level and client-level `notBefore` revocation policies are configured, Key... |
| CVE-2026-4885 | CRITICAL | 9.8 | 1.0% | May 19, 2026 | The Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file typ... |
| CVE-2026-47317 | HIGH | 7.5 | 0.3% | May 19, 2026 | Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation. This issue affects Es... |
| CVE-2026-47316 | HIGH | 7.5 | 0.3% | May 19, 2026 | Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Man... |
| CVE-2026-47315 | HIGH | 7.5 | 0.3% | May 19, 2026 | Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Man... |
| CVE-2026-47314 | CRITICAL | 9.8 | 0.3% | May 19, 2026 | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot:... |
| CVE-2026-47313 | HIGH | 7.5 | 0.3% | May 19, 2026 | Memory allocation with excessive size value vulnerability in Samsung Open Source Escargot allows Excessive Allocation. ... |
| CVE-2026-47312 | HIGH | 7.5 | 0.3% | May 19, 2026 | Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation. This ... |