CVE Vulnerability Database
Search and browse 420,515 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-116367 | MEDIUM | 6.3 | 0.3% | Oct 26, 2026 | A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of... |
| CVE-2026-115748 | HIGH | 8.8 | 0.6% | Oct 26, 2026 | **UNSUPPORTED WHEN ASSIGNED** Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP (Jabber... |
| CVE-2026-115721 | HIGH | 7.5 | 0.5% | Oct 26, 2026 | **UNSUPPORTED WHEN ASSIGNED** Unbounded allocation in XML parsing in Apache Vysper; all versions, may lead to an out of... |
| CVE-2026-115680 | MEDIUM | 6.5 | — | Oct 26, 2026 | Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission |
| CVE-2026-115679 | MEDIUM | 6.5 | — | Oct 26, 2026 | Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer |
| CVE-2026-115678 | MEDIUM | 5.3 | — | Oct 26, 2026 | Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing |
| CVE-2026-112346 | CRITICAL | 9.8 | 1.0% | Oct 26, 2026 | OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the Doc... |
| CVE-2026-112344 | MEDIUM | 6.8 | 0.3% | Oct 26, 2026 | Syncplify Server! 6.0.0 before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link ... |
| CVE-2026-112343 | HIGH | 8.1 | 0.5% | Oct 26, 2026 | Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to e... |
| CVE-2026-107090 | HIGH | 7.8 | 0.2% | Oct 26, 2026 | An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code... |
| CVE-2026-107080 | MEDIUM | 6.5 | 0.2% | Oct 26, 2026 | OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dw... |
| CVE-2026-99099 | HIGH | 7.8 | 0.2% | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Fix AMD TLBI Erratum #1718 The proces... |
| CVE-2026-99098 | — | — | — | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode wi... |
| CVE-2026-99097 | — | — | — | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: tee: shm: reject zero-sized allocations in tee_dyn_... |
| CVE-2026-99096 | — | — | — | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: io_uring/register: don't exempt disabled rings from... |
| CVE-2026-99095 | — | — | 0.2% | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drain the hangcheck timer and works on V3D... |
| CVE-2026-99094 | HIGH | 7.5 | 0.2% | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix TX descriptor bounds c... |
| CVE-2026-99093 | — | — | — | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: mm: don't schedule deferred kernel page table freei... |
| CVE-2026-99092 | — | — | — | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: riscv: patch: fix handling of bpf-jit execmem addre... |
| CVE-2026-99091 | — | — | 0.2% | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix status of pending commands flu... |
| CVE-2026-99090 | — | — | 0.2% | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: serialize vblank counter reads against ... |
| CVE-2026-99089 | — | — | 0.2% | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: i2s: enable op_clk in probe to balan... |
| CVE-2026-99088 | — | — | 0.2% | Oct 26, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presenc... |
| CVE-2026-94386 | MEDIUM | 4.8 | — | Oct 26, 2026 | Use of Cache Containing Sensitive Information vulnerability in Apache Camel Oauth component. This issue affects Apach... |
| CVE-2026-93850 | MEDIUM | 6.5 | 0.4% | Oct 26, 2026 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to bind the volume of... |