CVE Vulnerability Database
Search and browse 398,067 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-31251 | HIGH | 7.3 | 0.2% | May 11, 2026 | CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnera... |
| CVE-2026-31250 | HIGH | 7.3 | 0.2% | May 11, 2026 | CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnera... |
| CVE-2026-31249 | HIGH | 7.3 | 0.2% | May 11, 2026 | CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnera... |
| CVE-2026-31248 | HIGH | 7.5 | 0.3% | May 11, 2026 | Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0. The backend extracts and val... |
| CVE-2026-8292 | MEDIUM | 6.5 | 0.4% | May 11, 2026 | A security vulnerability has been detected in Open5GS up to 2.7.7. The affected element is the function yuarel_parse in ... |
| CVE-2026-8291 | MEDIUM | 6.5 | 0.4% | May 11, 2026 | A weakness has been identified in Open5GS up to 2.7.7. Impacted is the function ogs_nnrf_nfm_handle_nf_profile of the fi... |
| CVE-2026-7820 | MEDIUM | 6.9 | 0.2% | May 11, 2026 | Improper restriction of excessive authentication attempts (CWE-307) in pgAdmin 4. pgAdmin enforces MAX_LOGIN_ATTEMPTS o... |
| CVE-2026-7819 | HIGH | 8.1 | 0.4% | May 11, 2026 | Symbolic-link path traversal (CWE-61, CWE-22) in pgAdmin 4 File Manager. check_access_permission used os.path.abspath, ... |
| CVE-2026-7818 | HIGH | 7.8 | 0.1% | May 11, 2026 | Deserialization of untrusted data (CWE-502) in pgAdmin 4 FileBackedSessionManager. The session manager performed unsafe... |
| CVE-2026-7817 | HIGH | 7.1 | 0.2% | May 11, 2026 | Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration end... |
| CVE-2026-7816 | HIGH | 8.8 | 1.4% | May 11, 2026 | OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export. User-supplied input was interpolat... |
| CVE-2026-7815 | HIGH | 8.8 | 0.5% | May 11, 2026 | SQL injection vulnerability in pgAdmin 4 Maintenance Tool. Four user-supplied JSON fields (buffer_usage_limit, vacuum_p... |
| CVE-2026-7814 | MEDIUM | 4.8 | 0.2% | May 11, 2026 | Stored cross-site scripting (XSS) vulnerability in pgAdmin 4 Browser Tree and Explain Visualizer modules. User-controll... |
| CVE-2026-7813 | CRITICAL | 9.9 | 0.5% | May 11, 2026 | Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background Proces... |
| CVE-2026-6815 | MEDIUM | 5.9 | 0.5% | May 11, 2026 | An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path s... |
| CVE-2026-6093 | MEDIUM | 6 | 0.4% | May 11, 2026 | Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQL) backend when filtering Compose record... |
| CVE-2026-44643 | CRITICAL | 10 | 0.5% | May 11, 2026 | Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an att... |
| CVE-2026-44201 | MEDIUM | 5.3 | 0.3% | May 11, 2026 | Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, the Documents and I... |
| CVE-2026-44200 | MEDIUM | 6.5 | 0.2% | May 11, 2026 | Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with lim... |
| CVE-2026-44199 | MEDIUM | 6.5 | 0.2% | May 11, 2026 | Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with lim... |
| CVE-2026-44198 | MEDIUM | 4.3 | 0.2% | May 11, 2026 | Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without ... |
| CVE-2026-44197 | MEDIUM | 6.5 | 0.2% | May 11, 2026 | Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without ... |
| CVE-2026-42841 | MEDIUM | 4.8 | 0.4% | May 11, 2026 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with page editing permissions can inject... |
| CVE-2026-42613 | CRITICAL | 9.4 | 0.9% | May 11, 2026 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, the Login::register() method in the Login plugin accepts attac... |
| CVE-2026-42612 | MEDIUM | 5.4 | 0.2% | May 11, 2026 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a stored Cross-Site Scripting (XSS) vulnerability in getgrav/g... |