CVE Vulnerability Database
Search and browse 420,497 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-65632 | MEDIUM | 5.1 | 0.1% | Oct 26, 2026 | The jose library accepts ECDSA (ES256, ES256K, ES384, and ES512) JWS signatures of a non-canonical length. When verifyin... |
| CVE-2026-65631 | MEDIUM | 6.9 | 0.2% | Oct 26, 2026 | Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion de... |
| CVE-2026-65630 | MEDIUM | 5.9 | 0.1% | Oct 26, 2026 | Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key throug... |
| CVE-2026-65629 | HIGH | 7.4 | 0.1% | Oct 26, 2026 | Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a passwor... |
| CVE-2026-65628 | MEDIUM | 5.9 | 0.1% | Oct 26, 2026 | jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secret from two JWKs. It... |
| CVE-2026-65627 | MEDIUM | 6.9 | 0.2% | Oct 26, 2026 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows ... |
| CVE-2026-65626 | MEDIUM | 5.9 | 0.1% | Oct 26, 2026 | The pure-Erlang RSAES-PKCS1-v1_5 decryption in the jose_jwa_pkcs1 module is a Bleichenbacher padding oracle. eme_pkcs1_d... |
| CVE-2026-65625 | MEDIUM | 5.9 | 0.1% | Oct 26, 2026 | The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentication tag bits from the attacke... |
| CVE-2026-57196 | LOW | 2.3 | 0.8% | Oct 26, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-57193 | MEDIUM | 6.9 | 2.0% | Oct 26, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-57187 | HIGH | 7.1 | 0.5% | Oct 26, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-57184 | MEDIUM | 6.3 | 0.6% | Oct 26, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-116482 | LOW | 3.5 | 0.3% | Oct 26, 2026 | A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a2... |
| CVE-2026-116479 | MEDIUM | 4.3 | 0.3% | Oct 26, 2026 | A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage of the component JS... |
| CVE-2026-116478 | MEDIUM | 5.3 | 0.4% | Oct 26, 2026 | A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2as... |
| CVE-2026-116477 | MEDIUM | 4.3 | 0.3% | Oct 26, 2026 | A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impacted element is the fu... |
| CVE-2026-115927 | MEDIUM | 5.3 | 0.4% | Oct 26, 2026 | Tornado is a Python web framework and asynchronous networking library. Prior to 6.6.0, Tornado decodes HTTP/1.1 chunked ... |
| CVE-2026-115924 | HIGH | 8.6 | 0.4% | Oct 26, 2026 | Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled... |
| CVE-2026-115533 | — | — | 0.3% | Oct 26, 2026 | The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from_pretrai... |
| CVE-2026-104598 | HIGH | 7.5 | 0.2% | Oct 26, 2026 | libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a rem... |
| CVE-2026-104597 | HIGH | 7.5 | 0.2% | Oct 26, 2026 | libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. This allows a r... |
| CVE-2026-104596 | HIGH | 7.5 | 0.2% | Oct 26, 2026 | libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/... |
| CVE-2014-125135 | HIGH | 7.3 | — | Oct 26, 2026 | A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknown function of the component Fl... |
| CVE-2026-116638 | HIGH | 7.5 | 0.2% | Oct 26, 2026 | The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls... |
| CVE-2026-116632 | MEDIUM | 5.4 | 0.2% | Oct 26, 2026 | A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to d... |