CVE Vulnerability Database
Search and browse 420,497 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-82389 | MEDIUM | 6.5 | — | Oct 26, 2026 | In the Bluetooth Classic Hands-Free Profile Audio Gateway role, hfp_ag_create() in subsys/bluetooth/host/classic/hfp_ag.... |
| CVE-2026-82388 | MEDIUM | 5.3 | — | Oct 26, 2026 | bt_hfp_hf_connect() in subsys/bluetooth/host/classic/hfp_hf.c allocates the per-connection HFP Hands-Free object with hf... |
| CVE-2026-81039 | MEDIUM | 4.3 | 0.2% | Oct 26, 2026 | The Bluetooth host pre-allocates a bt_conn object (a "reservation") from the fixed acl_conns[] pool for every connectabl... |
| CVE-2026-81038 | HIGH | 7.1 | 0.1% | Oct 26, 2026 | The Object Transfer Service server builds its Object Action Control Point (OACP) response indication in oacp_ind_send() ... |
| CVE-2026-71456 | HIGH | 8.5 | 0.1% | Oct 26, 2026 | Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Att... |
| CVE-2026-71455 | MEDIUM | 5.3 | 0.1% | Oct 26, 2026 | Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve... |
| CVE-2026-19742 | LOW | 3.7 | 0.2% | Oct 26, 2026 | The IPv6 stack derived the long-lived secret key used to compute RFC 7217 stable interface identifiers (gen_stable_iid()... |
| CVE-2026-116612 | HIGH | 7.8 | — | Oct 26, 2026 | A flaw was found in GStreamer Editing Services (gst-editing-services). A GES project file can embed an arbitrary GStream... |
| CVE-2026-116596 | — | — | — | Oct 26, 2026 | Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in i... |
| CVE-2026-116403 | MEDIUM | 5.9 | — | Oct 26, 2026 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Awesomemoti... |
| CVE-2026-116396 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TMS Amelia ameliab... |
| CVE-2026-116395 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins LightBox ... |
| CVE-2026-116388 | MEDIUM | 5.3 | — | Oct 26, 2026 | Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2026-116384 | MEDIUM | 6.3 | 0.2% | Oct 26, 2026 | A weakness has been identified in Bdtask Garage 24 Garage Management Software 1.0. This vulnerability affects unknown co... |
| CVE-2026-116371 | MEDIUM | 6.3 | — | Oct 26, 2026 | A weakness has been identified in Akuvox Akubela HyPanel PS51 51.130.40.26. The impacted element is an unknown function ... |
| CVE-2026-116370 | CRITICAL | 9.6 | 0.4% | Oct 26, 2026 | A security flaw has been discovered in 2K Games Sid Meier's Civilization VI 1.0.12.68. The affected element is the funct... |
| CVE-2026-115913 | MEDIUM | 6.5 | 0.3% | Oct 26, 2026 | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the Phi-4 multimodal audio encoder i... |
| CVE-2026-115912 | HIGH | 8.8 | 0.5% | Oct 26, 2026 | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place fo... |
| CVE-2026-115911 | MEDIUM | 6.5 | 0.3% | Oct 26, 2026 | vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.32.0, authenticated callers can s... |
| CVE-2026-115910 | MEDIUM | 6.8 | 0.2% | Oct 26, 2026 | Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in social_co... |
| CVE-2026-115909 | HIGH | 7.5 | — | Oct 26, 2026 | zip is a zip library for Rust that supports reading and writing simple ZIP files. From 1.3.0 until 9.0.0, ZipArchive::ex... |
| CVE-2026-115908 | HIGH | 7.4 | — | Oct 26, 2026 | zip is a zip library for Rust that supports reading and writing simple ZIP files. From 7.2.0 until 9.0.0, ZipArchive::ex... |
| CVE-2026-115907 | HIGH | 7.5 | 0.4% | Oct 26, 2026 | zip is a zip library for Rust that supports reading and writing simple ZIP files. From 5.1.0 until 9.0.0, applications b... |
| CVE-2026-115906 | MEDIUM | 6.5 | 0.2% | Oct 26, 2026 | zip is a zip library for Rust that supports reading and writing simple ZIP files. From 0.6.0 until 9.0.0, the AES entry ... |
| CVE-2026-115905 | CRITICAL | 10 | 0.3% | Oct 26, 2026 | zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, ZipArchive treats Centr... |