CVE Vulnerability Database
Search and browse 398,020 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-31236 | CRITICAL | 9.8 | 0.3% | May 12, 2026 | The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument.... |
| CVE-2026-31235 | CRITICAL | 9.8 | 0.5% | May 12, 2026 | The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within... |
| CVE-2026-31234 | CRITICAL | 9.8 | 0.7% | May 12, 2026 | Horovod thru 0.28.1 contains an insecure deserialization vulnerability (CWE-502) in its KVStore HTTP server component. T... |
| CVE-2026-31233 | CRITICAL | 9.8 | 0.6% | May 12, 2026 | Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism. Whe... |
| CVE-2026-31232 | HIGH | 8.8 | 0.5% | May 12, 2026 | The CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserializa... |
| CVE-2026-31231 | CRITICAL | 9.8 | 0.6% | May 12, 2026 | Cognee thru v0.4.0 contains a critical remote code execution vulnerability in its notebook cell execution API endpoint. ... |
| CVE-2026-31230 | CRITICAL | 9.8 | 0.6% | May 12, 2026 | The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kub... |
| CVE-2026-31229 | CRITICAL | 9.8 | 0.6% | May 12, 2026 | The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains an insecure deserialization vulnerability (CWE-502) in its... |
| CVE-2026-29204 | CRITICAL | 9.1 | 0.3% | May 12, 2026 | Insufficient ownership check in `clientarea.php` allows an authenticated client area user to submit requests using anoth... |
| CVE-2026-26083 | CRITICAL | 9.8 | 0.7% | May 12, 2026 | A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, Fo... |
| CVE-2026-25690 | MEDIUM | 6.5 | 0.2% | May 12, 2026 | An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDec... |
| CVE-2026-25088 | HIGH | 8.8 | 0.3% | May 12, 2026 | An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiN... |
| CVE-2026-21530 | MEDIUM | 6.7 | 0.3% | May 12, 2026 | Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally. |
| CVE-2026-20767 | HIGH | 7.8 | 0.1% | May 12, 2026 | Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User App... |
| CVE-2026-20714 | HIGH | 7.8 | 0.1% | May 12, 2026 | Out-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applicati... |
| CVE-2025-67604 | MEDIUM | 5.3 | 0.4% | May 12, 2026 | A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0... |
| CVE-2025-53870 | MEDIUM | 6.7 | 0.6% | May 12, 2026 | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet ... |
| CVE-2025-53844 | HIGH | 8.8 | 0.6% | May 12, 2026 | A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 ... |
| CVE-2025-53681 | HIGH | 7.2 | 0.4% | May 12, 2026 | An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerab... |
| CVE-2025-53680 | MEDIUM | 6.7 | 0.6% | May 12, 2026 | An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vul... |
| CVE-2025-46311 | HIGH | 7.5 | 0.2% | May 12, 2026 | An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and... |
| CVE-2025-43524 | HIGH | 8.8 | 0.1% | May 12, 2026 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS S... |
| CVE-2026-8407 | MEDIUM | 4.3 | 0.2% | May 12, 2026 | Missing authorization in the PAM module in Devolutions Server allows an authenticated user with a PAM license but no add... |
| CVE-2026-8278 | — | — | — | May 12, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a ... |
| CVE-2026-5089 | HIGH | 7.3 | 0.3% | May 12, 2026 | YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 (sexagesimal) parsing code in perl_syck... |