CVE Vulnerability Database
Search and browse 420,497 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-116631 | MEDIUM | 5.4 | 0.2% | Oct 26, 2026 | A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prom... |
| CVE-2026-116476 | MEDIUM | 5.4 | 0.2% | Oct 26, 2026 | A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskP... |
| CVE-2026-116471 | MEDIUM | 4.3 | 0.2% | Oct 26, 2026 | A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the file... |
| CVE-2026-116467 | MEDIUM | 5.3 | 0.6% | Oct 26, 2026 | A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown func... |
| CVE-2026-110720 | CRITICAL | 9.9 | 0.4% | Oct 26, 2026 | Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding r... |
| CVE-2026-104594 | HIGH | 7.5 | 0.2% | Oct 26, 2026 | libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allow... |
| CVE-2026-104593 | HIGH | 7.5 | 0.2% | Oct 26, 2026 | osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.c. This allo... |
| CVE-2026-104592 | MEDIUM | 6.5 | 0.2% | Oct 26, 2026 | libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allo... |
| CVE-2026-104591 | HIGH | 7.5 | 0.2% | Oct 26, 2026 | libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c. This allows ... |
| CVE-2026-81509 | MEDIUM | 6.1 | — | Oct 26, 2026 | nforwardauth is a forward auth service that allows the use of a single authentication middleware for multiple sites. Ver... |
| CVE-2026-72758 | HIGH | 7.5 | — | Oct 26, 2026 | When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the range... |
| CVE-2026-72757 | MEDIUM | 5.3 | — | Oct 26, 2026 | Routinator runs out of open connections on the HTTP server when many connections are opened but never closed, leaving th... |
| CVE-2026-72756 | HIGH | 7.5 | — | Oct 26, 2026 | Routinator exits when an rsync URI for a file obtained over RRDP contains a path that cannot be stored on disk, such as ... |
| CVE-2026-72755 | LOW | 3.8 | — | Oct 26, 2026 | Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a know... |
| CVE-2026-72754 | HIGH | 7.5 | — | Oct 26, 2026 | When Routinator encounters a CRL with many entries, it may hang or run out of memory. If Routinator encounters a CRL fil... |
| CVE-2026-72753 | HIGH | 8.2 | — | Oct 26, 2026 | When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, po... |
| CVE-2026-72752 | MEDIUM | 6.5 | — | Oct 26, 2026 | Routinator runs out of memory when the JSON output is requested many times concurrently. This condition can be triggered... |
| CVE-2026-70379 | MEDIUM | 6.5 | 0.1% | Oct 26, 2026 | When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unau... |
| CVE-2026-50096 | MEDIUM | 6.1 | — | Oct 26, 2026 | There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior which may allo... |
| CVE-2026-50095 | MEDIUM | 6.1 | — | Oct 26, 2026 | There is a stored cross site scripting issue in Esri ArcGIS Server 11.1 and earlier on Windows and Linux that in some co... |
| CVE-2026-33522 | MEDIUM | 5.3 | — | Oct 26, 2026 | Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A pa... |
| CVE-2026-33521 | HIGH | 7.5 | — | Oct 26, 2026 | There is s denial of service vulnerability in Esri ArcGIS Server versions 12.0 and prior that may allow a remote, unauth... |
| CVE-2026-33520 | MEDIUM | 6.1 | — | Oct 26, 2026 | There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior which may allo... |
| CVE-2026-116634 | MEDIUM | 5.9 | — | Oct 26, 2026 | OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows unauthenticated attackers to ... |
| CVE-2026-116463 | MEDIUM | 6.3 | 0.2% | Oct 26, 2026 | A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN_0062d96c of the compone... |