CVE Vulnerability Database
Search and browse 398,130 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-41491 | HIGH | 8.1 | 0.3% | May 8, 2026 | Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. From versions 1.3... |
| CVE-2026-41423 | MEDIUM | 5.3 | 0.3% | May 8, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-41161 | MEDIUM | 5.3 | 0.3% | May 8, 2026 | Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version... |
| CVE-2026-39816 | HIGH | 8.8 | 0.8% | May 8, 2026 | The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Requi... |
| CVE-2026-32803 | LOW | 3.3 | 0.1% | May 8, 2026 | Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and 9.11.0.0 ... |
| CVE-2025-71302 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: fix for dma-fence safe access rules C... |
| CVE-2025-71301 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/tests: shmem: Hold reservation lock around vmap... |
| CVE-2025-71300 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: Revert "arm64: zynqmp: Add an OP-TEE node to the de... |
| CVE-2025-71299 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Parse DT for flashes with the... |
| CVE-2025-71298 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/tests: shmem: Hold reservation lock around madv... |
| CVE-2025-71297 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_confi... |
| CVE-2025-71296 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/tests: shmem: Hold reservation lock around purg... |
| CVE-2026-8077 | HIGH | 8.6 | 0.2% | May 8, 2026 | Lack of proper authorization implementation in the CashDro 3 web administration panel, version 24.01.00.26. The backend ... |
| CVE-2026-25199 | CRITICAL | 9.1 | 0.5% | May 8, 2026 | Instances deployed via the Proxmox extension allow unauthorized access to instances belonging to other tenants. This... |
| CVE-2026-25077 | HIGH | 8.8 | 0.7% | May 8, 2026 | Account users are allowed by default to register templates to be downloaded directly to the primary storage for deployin... |
| CVE-2025-69233 | MEDIUM | 5.3 | 0.4% | May 8, 2026 | Due to multiple time-of-check time-of-use race conditions in the resource count check and increment logic, as well as mi... |
| CVE-2025-66467 | HIGH | 8.1 | 0.4% | May 8, 2026 | Missing MinIO policy cleanup on bucket deletion via Apache CloudStack allows users to retain access to buckets which the... |
| CVE-2025-66172 | HIGH | 8.1 | 0.5% | May 8, 2026 | The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated u... |
| CVE-2025-66171 | MEDIUM | 6.5 | 0.5% | May 8, 2026 | The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated u... |
| CVE-2025-66170 | MEDIUM | 6.5 | 0.5% | May 8, 2026 | The CloudStack Backup plugin has an improper authorization logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenti... |
| CVE-2022-50994 | CRITICAL | 9.2 | 1.4% | May 8, 2026 | DrayTek Vigor 2960 firmware versions prior to 1.5.1.4 contain an OS command injection vulnerability in the CGI login han... |
| CVE-2026-8153 | CRITICAL | 9.8 | 1.8% | May 8, 2026 | OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthe... |
| CVE-2026-8076 | CRITICAL | 9.3 | 0.3% | May 8, 2026 | Weak credentials in the CashDro 3 web administration panel, version 24.01.00.26, where the platform allows the use of nu... |
| CVE-2026-3318 | MEDIUM | 5.3 | 0.3% | May 8, 2026 | Open redirection vulnerability in the latest demo version of the Cradle eCommerce platform. The vulnerability occurs in ... |
| CVE-2026-7650 | MEDIUM | 6.4 | 0.2% | May 8, 2026 | The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id'... |