CVE Vulnerability Database
Search and browse 420,497 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-116540 | MEDIUM | 5.9 | — | Oct 26, 2026 | netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssl... |
| CVE-2026-116539 | MEDIUM | 5.9 | 0.4% | Oct 26, 2026 | Netty netty-tcnative before 2.0.84.Final contains a heap buffer overflow vulnerability in the tcn_write_to_bytebuffer BI... |
| CVE-2026-116538 | MEDIUM | 4.7 | 0.3% | Oct 26, 2026 | HtmlSanitizer before 9.2.1039 and 10.0 prereleases before 10.0.1037-beta contains a cross-site scripting vulnerability b... |
| CVE-2026-116489 | HIGH | 7.5 | 0.5% | Oct 26, 2026 | Timescale pgvectorscale before 0.9.1 contains a type confusion vulnerability that allows low-privileged database users t... |
| CVE-2026-116394 | MEDIUM | 5.3 | — | Oct 26, 2026 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Magepeople inc. WpEvently... |
| CVE-2026-116369 | MEDIUM | 6.3 | 1.4% | Oct 26, 2026 | A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0. Impacted is the function handleL... |
| CVE-2026-116368 | HIGH | 7.3 | — | Oct 26, 2026 | A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2. This issue affects some unknown processing of the f... |
| CVE-2026-116367 | MEDIUM | 6.3 | 0.3% | Oct 26, 2026 | A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of... |
| CVE-2026-115748 | HIGH | 8.8 | 0.6% | Oct 26, 2026 | **UNSUPPORTED WHEN ASSIGNED** Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP (Jabber... |
| CVE-2026-115721 | HIGH | 7.5 | 0.5% | Oct 26, 2026 | **UNSUPPORTED WHEN ASSIGNED** Unbounded allocation in XML parsing in Apache Vysper; all versions, may lead to an out of... |
| CVE-2026-115680 | MEDIUM | 6.5 | — | Oct 26, 2026 | Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission |
| CVE-2026-115679 | MEDIUM | 6.5 | — | Oct 26, 2026 | Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer |
| CVE-2026-115678 | MEDIUM | 5.3 | — | Oct 26, 2026 | Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing |
| CVE-2026-112346 | CRITICAL | 9.8 | 1.0% | Oct 26, 2026 | OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the Doc... |
| CVE-2026-112344 | MEDIUM | 6.8 | 0.3% | Oct 26, 2026 | Syncplify Server! 6.0.0 before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link ... |
| CVE-2026-112343 | HIGH | 8.1 | 0.5% | Oct 26, 2026 | Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to e... |
| CVE-2026-107090 | HIGH | 7.8 | 0.2% | Oct 26, 2026 | An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code... |
| CVE-2026-107080 | MEDIUM | 6.5 | 0.2% | Oct 26, 2026 | OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dw... |
| CVE-2026-99099 | HIGH | 7.8 | 0.2% | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Fix AMD TLBI Erratum #1718 The proces... |
| CVE-2026-99098 | — | — | — | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode wi... |
| CVE-2026-99097 | — | — | — | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: tee: shm: reject zero-sized allocations in tee_dyn_... |
| CVE-2026-99096 | — | — | — | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: io_uring/register: don't exempt disabled rings from... |
| CVE-2026-99095 | — | — | 0.2% | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drain the hangcheck timer and works on V3D... |
| CVE-2026-99094 | HIGH | 7.5 | 0.2% | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix TX descriptor bounds c... |
| CVE-2026-99093 | — | — | — | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: mm: don't schedule deferred kernel page table freei... |