CVE Vulnerability Database
Search and browse 420,405 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-114596 | HIGH | 8.2 | 0.3% | Oct 27, 2026 | In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trig... |
| CVE-2026-114595 | CRITICAL | 9.8 | 0.5% | Oct 27, 2026 | In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocat... |
| CVE-2026-113775 | HIGH | 7.8 | 0.1% | Oct 27, 2026 | A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command expos... |
| CVE-2026-112353 | HIGH | 8.2 | 0.2% | Oct 27, 2026 | GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webma... |
| CVE-2026-109090 | HIGH | 7.5 | 0.3% | Oct 27, 2026 | A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before... |
| CVE-2026-109089 | HIGH | 7.5 | 0.3% | Oct 27, 2026 | A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious ... |
| CVE-2026-109088 | MEDIUM | 6.5 | 0.3% | Oct 27, 2026 | A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_... |
| CVE-2026-108142 | CRITICAL | 9.1 | 0.4% | Oct 27, 2026 | A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service. |
| CVE-2026-108141 | MEDIUM | 5.9 | 0.4% | Oct 27, 2026 | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backe... |
| CVE-2026-108140 | MEDIUM | 5.9 | 0.4% | Oct 27, 2026 | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backe... |
| CVE-2026-108015 | CRITICAL | 9.1 | 0.1% | Oct 27, 2026 | Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com... |
| CVE-2026-108014 | CRITICAL | 9.1 | 0.1% | Oct 27, 2026 | Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com... |
| CVE-2026-107671 | HIGH | 8.5 | 0.3% | Oct 27, 2026 | A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disab... |
| CVE-2026-106078 | MEDIUM | 6.9 | 0.3% | Oct 27, 2026 | A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token an... |
| CVE-2026-106077 | HIGH | 8.3 | 0.2% | Oct 27, 2026 | A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on th... |
| CVE-2026-106076 | CRITICAL | 9 | 0.4% | Oct 27, 2026 | A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of th... |
| CVE-2026-105781 | CRITICAL | 10 | 0.5% | Oct 27, 2026 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL ... |
| CVE-2026-105780 | CRITICAL | 9.9 | 0.5% | Oct 27, 2026 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code... |
| CVE-2026-105779 | CRITICAL | 9.1 | 0.3% | Oct 27, 2026 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL ... |
| CVE-2026-105489 | CRITICAL | 9.9 | — | Oct 27, 2026 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL ... |
| CVE-2026-105477 | HIGH | 7.3 | 0.1% | Oct 27, 2026 | A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a... |
| CVE-2026-104354 | CRITICAL | 9.1 | 0.5% | Oct 27, 2026 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL ... |
| CVE-2026-104353 | CRITICAL | 9.9 | 1.3% | Oct 27, 2026 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Co... |
| CVE-2026-104351 | CRITICAL | 9.9 | 0.6% | Oct 27, 2026 | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability t... |
| CVE-2026-104350 | CRITICAL | 9.3 | 0.6% | Oct 27, 2026 | Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could expl... |