CVE Vulnerability Database
Search and browse 420,407 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-65151 | HIGH | 8.4 | 0.2% | Oct 27, 2026 | NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful explo... |
| CVE-2026-65145 | CRITICAL | 10 | 0.5% | Oct 27, 2026 | NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vul... |
| CVE-2026-65120 | HIGH | 7.1 | 0.1% | Oct 27, 2026 | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful e... |
| CVE-2026-65119 | HIGH | 8.4 | 0.2% | Oct 27, 2026 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker... |
| CVE-2026-47486 | HIGH | 7.8 | 0.2% | Oct 27, 2026 | NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successf... |
| CVE-2026-24269 | HIGH | 7.1 | 0.1% | Oct 27, 2026 | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful e... |
| CVE-2026-15586 | MEDIUM | 5.3 | 0.2% | Oct 27, 2026 | Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc.... |
| CVE-2026-116627 | HIGH | 8.7 | 0.2% | Oct 27, 2026 | Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Dev... |
| CVE-2026-114409 | MEDIUM | 5.7 | 0.1% | Oct 27, 2026 | Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local appl... |
| CVE-2026-107590 | LOW | 1.9 | 0.1% | Oct 27, 2026 | An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt... |
| CVE-2026-100164 | HIGH | 7.5 | 0.3% | Oct 27, 2026 | Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. A... |
| CVE-2026-90732 | MEDIUM | 4.9 | 0.3% | Oct 27, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 thro... |
| CVE-2026-90731 | MEDIUM | 4.9 | 0.3% | Oct 27, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7... |
| CVE-2026-90730 | MEDIUM | 6.5 | — | Oct 27, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7... |
| CVE-2026-90729 | MEDIUM | 6.7 | 0.2% | Oct 27, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7... |
| CVE-2026-90728 | MEDIUM | 6.3 | 0.1% | Oct 27, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7... |
| CVE-2026-56084 | MEDIUM | 5.3 | 0.2% | Oct 27, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7... |
| CVE-2026-4337 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user t... |
| CVE-2026-41022 | MEDIUM | 5.9 | 0.1% | Oct 27, 2026 | Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could expl... |
| CVE-2026-41021 | HIGH | 7.5 | 0.2% | Oct 27, 2026 | Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through C... |
| CVE-2026-41020 | HIGH | 7.5 | 0.2% | Oct 27, 2026 | Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to cap... |
| CVE-2026-13162 | HIGH | 7.7 | 0.2% | Oct 27, 2026 | An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbi... |
| CVE-2026-117499 | LOW | 3.7 | 0.1% | Oct 27, 2026 | @fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behavi... |
| CVE-2026-115408 | MEDIUM | 5.5 | 0.1% | Oct 27, 2026 | In `github.com/eclipse-keypont/crypto11/v2` versions `>= 2.0.0-rc3, <= 2.0.0-rc8`, the ML-KEM key-pair lookup functions ... |
| CVE-2026-115216 | CRITICAL | 9.1 | 0.2% | Oct 27, 2026 | In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when the operator contac... |