CVE Vulnerability Database
Search and browse 375,854 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-20712 | MEDIUM | 4 | 0.1% | Aug 11, 2026 | Incomplete cleanup in some UEFI firmware for some Intel(R) reference platforms within UEFI may allow an information disc... |
| CVE-2026-0465 | MEDIUM | 5.6 | 0.1% | Aug 11, 2026 | A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kern... |
| CVE-2025-54512 | HIGH | 7 | 0.1% | Aug 11, 2026 | A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to e... |
| CVE-2025-0046 | HIGH | 7 | 0.1% | Aug 11, 2026 | Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrar... |
| CVE-2022-50997 | HIGH | 7.5 | — | Aug 11, 2026 | Weaver (Fanwei) E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint th... |
| CVE-2016-20097 | HIGH | 7.5 | — | Aug 11, 2026 | Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthe... |
| CVE-2026-73089 | HIGH | 7.5 | — | Aug 11, 2026 | Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to ... |
| CVE-2026-73088 | HIGH | 7.5 | — | Aug 11, 2026 | Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to ... |
| CVE-2026-73087 | LOW | 2.3 | — | Aug 11, 2026 | Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SSRF guard in internal... |
| CVE-2026-73086 | HIGH | 7.4 | 0.3% | Aug 11, 2026 | nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the na... |
| CVE-2026-73085 | MEDIUM | 5.3 | — | Aug 11, 2026 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.36.0, the jwtAuthCheck function in server/auth/... |
| CVE-2026-73084 | MEDIUM | 6.1 | 0.2% | Aug 11, 2026 | Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoi... |
| CVE-2026-73083 | HIGH | 7.6 | — | Aug 11, 2026 | Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine l... |
| CVE-2026-73082 | MEDIUM | 5.3 | — | Aug 11, 2026 | Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/projects/:projectId/mc... |
| CVE-2026-73081 | HIGH | 8.7 | 0.3% | Aug 11, 2026 | Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline ... |
| CVE-2026-72971 | MEDIUM | 5.5 | — | Aug 11, 2026 | Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.... |
| CVE-2026-71390 | MEDIUM | 4 | 0.2% | Aug 11, 2026 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur... |
| CVE-2026-71389 | MEDIUM | 6.2 | 0.2% | Aug 11, 2026 | CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a... |
| CVE-2026-71387 | HIGH | 8.8 | 0.3% | Aug 11, 2026 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the ... |
| CVE-2026-71386 | HIGH | 8.8 | 0.3% | Aug 11, 2026 | is affected by a Cross-site Scripting (XSS) vulnerability that could result in arbitrary code execution in the context o... |
| CVE-2026-71384 | CRITICAL | 9.6 | 0.2% | Aug 11, 2026 | is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker coul... |
| CVE-2026-71383 | HIGH | 7.3 | 0.3% | Aug 11, 2026 | is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker coul... |
| CVE-2026-71331 | HIGH | 8.1 | — | Aug 11, 2026 | Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an un... |
| CVE-2026-70355 | HIGH | 7.3 | — | Aug 11, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-70354 | HIGH | 7.8 | 0.4% | Aug 11, 2026 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. |