CVE Vulnerability Database
Search and browse 420,383 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-93521 | HIGH | 7.8 | 0.2% | Oct 28, 2026 | A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 c... |
| CVE-2026-67187 | HIGH | 7.1 | 0.2% | Oct 28, 2026 | Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete server-side validation vulnerability that allows u... |
| CVE-2026-59979 | HIGH | 8.3 | 0.3% | Oct 28, 2026 | YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snaps... |
| CVE-2026-56828 | HIGH | 8.8 | 0.4% | Oct 28, 2026 | Shopper is a Headless e-commerce Admin Panel. From 2.8.0 until 2.8.1, three Shopper Livewire admin components retain aut... |
| CVE-2026-50543 | MEDIUM | 4.3 | 0.2% | Oct 28, 2026 | Xibo is an open source digital signage platform with a web content management system and Windows display player software... |
| CVE-2026-50542 | MEDIUM | 5.4 | 0.3% | Oct 28, 2026 | Xibo is an open source digital signage platform with a web content management system and Windows display player software... |
| CVE-2026-50539 | MEDIUM | 6.5 | 0.4% | Oct 28, 2026 | Xibo is an open source digital signage platform with a web content management system and Windows display player software... |
| CVE-2026-47235 | HIGH | 7.5 | 0.2% | Oct 28, 2026 | SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before th... |
| CVE-2026-44179 | CRITICAL | 9.9 | 0.7% | Oct 28, 2026 | XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 un... |
| CVE-2026-118029 | MEDIUM | 5.9 | 0.2% | Oct 28, 2026 | Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas (awswrangler) befor... |
| CVE-2026-116778 | HIGH | 8.8 | 0.5% | Oct 28, 2026 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.2253 and 1.6.0-RC-1,... |
| CVE-2026-116776 | HIGH | 7 | 0.2% | Oct 28, 2026 | USB Test is a lightweight Windows CLI utility for verifying sector integrity and detecting overreported capacity on USB ... |
| CVE-2026-112357 | HIGH | 7.8 | 0.1% | Oct 28, 2026 | GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local pri... |
| CVE-2026-112356 | MEDIUM | 6.1 | 0.3% | Oct 28, 2026 | GFI KerioConnect (Kerio Connect) before 10.0.9 Patch 2 contains a cross-site scripting vulnerability in the Webmail comp... |
| CVE-2026-93520 | HIGH | 7.8 | 0.2% | Oct 28, 2026 | A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X ... |
| CVE-2026-93519 | HIGH | 7.8 | 0.2% | Oct 28, 2026 | A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland b... |
| CVE-2026-93518 | HIGH | 7.8 | 0.2% | Oct 28, 2026 | An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients i... |
| CVE-2026-115402 | MEDIUM | 5.7 | 0.1% | Oct 28, 2026 | OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) vi... |
| CVE-2026-106972 | HIGH | 7.5 | 0.2% | Oct 28, 2026 | Uncontrolled recursion in MessagePack\BufferUnpacker::unpack() in rybakit/msgpack versions prior to 0.11.0 allows attack... |
| CVE-2026-106971 | HIGH | 7.5 | 0.2% | Oct 28, 2026 | An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attac... |
| CVE-2026-93517 | HIGH | 8.5 | 0.2% | Oct 28, 2026 | A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.... |
| CVE-2026-59959 | MEDIUM | 4.8 | 0.1% | Oct 28, 2026 | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. P... |
| CVE-2026-59185 | HIGH | 8.5 | — | Oct 28, 2026 | identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on `... |
| CVE-2026-59179 | HIGH | 8.3 | 0.4% | Oct 28, 2026 | OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, `@openhop/server` passes unauthenticated ... |
| CVE-2026-59177 | HIGH | 8.8 | 1.2% | Oct 28, 2026 | ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to 1.0.10, the `Home Ass... |