CVE Vulnerability Database
Search and browse 398,020 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-32687 | HIGH | 7.8 | 0.2% | May 12, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgr... |
| CVE-2025-70842 | MEDIUM | 5.4 | 0.1% | May 12, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the File Management module of FluentCMS 1.2.3. The f... |
| CVE-2026-8391 | MEDIUM | 5.3 | 0.3% | May 12, 2026 | Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Fir... |
| CVE-2026-8390 | HIGH | 7.3 | 0.3% | May 12, 2026 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150.0.3. |
| CVE-2026-8389 | HIGH | 8.8 | 0.3% | May 12, 2026 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3. |
| CVE-2026-8388 | MEDIUM | 6.5 | 0.2% | May 12, 2026 | Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, ... |
| CVE-2026-6865 | HIGH | 7.1 | 0.3% | May 12, 2026 | CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause un... |
| CVE-2026-45091 | CRITICAL | 9.1 | 0.3% | May 12, 2026 | sealed-env is a cross-stack, zero-trust secret management library for Node.js and Java/Spring Boot. In sealed-env enterp... |
| CVE-2026-43930 | MEDIUM | 5.9 | 0.2% | May 12, 2026 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.76 ... |
| CVE-2026-43916 | HIGH | 8.7 | 0.3% | May 12, 2026 | pam_authnft is a PAM session module binding nftables firewall rules to authenticated sessions via cgroupv2 inodes. Prior... |
| CVE-2026-42006 | MEDIUM | 4.3 | 0.6% | May 12, 2026 | An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomple... |
| CVE-2026-40638 | MEDIUM | 6.7 | 0.1% | May 12, 2026 | Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary privileges vulnerability... |
| CVE-2026-40020 | MEDIUM | 4.3 | 0.3% | May 12, 2026 | Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap_acl_all... |
| CVE-2026-40016 | MEDIUM | 6.5 | 0.3% | May 12, 2026 | Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass configured CPU time limits ... |
| CVE-2026-35071 | HIGH | 8.2 | 0.5% | May 12, 2026 | Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements used in... |
| CVE-2026-33603 | MEDIUM | 5.3 | 0.2% | May 12, 2026 | Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding. This ... |
| CVE-2026-27851 | CRITICAL | 9.1 | 0.4% | May 12, 2026 | When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted... |
| CVE-2025-12659 | HIGH | 7.8 | 0.2% | May 12, 2026 | Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files. This could... |
| CVE-2026-4827 | HIGH | 8.7 | 0.3% | May 12, 2026 | CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the networ... |
| CVE-2026-45218 | HIGH | 7.7 | 0.2% | May 12, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Trave... |
| CVE-2026-45215 | MEDIUM | 5.3 | 0.2% | May 12, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Emb... |
| CVE-2026-45214 | HIGH | 8.5 | 0.2% | May 12, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpro Xpro Elemento... |
| CVE-2026-45213 | HIGH | 7.6 | 0.2% | May 12, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 BEAR wo... |
| CVE-2026-45212 | MEDIUM | 5.3 | 0.2% | May 12, 2026 | Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Exploiting ... |
| CVE-2026-45211 | HIGH | 8.5 | 0.2% | May 12, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExpe... |