CVE Vulnerability Database
Search and browse 420,577 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110491 | HIGH | 7.5 | 0.4% | Oct 22, 2026 | The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operatio... |
| CVE-2026-110243 | CRITICAL | 9.9 | 0.4% | Oct 22, 2026 | The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name... |
| CVE-2026-107861 | CRITICAL | 9.9 | 0.4% | Oct 22, 2026 | The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepte... |
| CVE-2026-97785 | CRITICAL | 10 | 0.6% | Oct 22, 2026 | Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-96616 | MEDIUM | 6.5 | 0.3% | Oct 22, 2026 | Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any r... |
| CVE-2026-96185 | HIGH | 7.5 | 0.5% | Oct 22, 2026 | Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network. |
| CVE-2026-83938 | CRITICAL | 10 | 0.7% | Oct 22, 2026 | Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker t... |
| CVE-2026-115449 | LOW | 3.5 | 0.2% | Oct 22, 2026 | A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data... |
| CVE-2026-115424 | MEDIUM | 5.5 | 0.2% | Oct 22, 2026 | A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the applicati... |
| CVE-2026-115221 | MEDIUM | 5.4 | 0.1% | Oct 22, 2026 | A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital... |
| CVE-2026-114620 | MEDIUM | 5.4 | 0.4% | Oct 22, 2026 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, Authlib's RFC 9101 JWTAuthent... |
| CVE-2026-114619 | MEDIUM | 4.6 | 0.2% | Oct 22, 2026 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDImplicitGrant.validate_... |
| CVE-2026-114618 | MEDIUM | 6.8 | 0.2% | Oct 22, 2026 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBeare... |
| CVE-2026-114617 | MEDIUM | 4.2 | 0.2% | Oct 22, 2026 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parse_id_token() ... |
| CVE-2026-114616 | CRITICAL | 9.1 | 0.3% | Oct 22, 2026 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, Authlib's OctKey.import_key()... |
| CVE-2026-114615 | CRITICAL | 9.1 | 0.2% | Oct 22, 2026 | Authlib is a Python library which builds OAuth and OpenID Connect servers. From 1.3.1 until 1.9.0, OctKey.import_key() c... |
| CVE-2026-111594 | HIGH | 8.1 | 0.2% | Oct 22, 2026 | InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmit... |
| CVE-2026-111100 | MEDIUM | 5.3 | 0.3% | Oct 22, 2026 | The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote... |
| CVE-2026-110063 | CRITICAL | 10 | 0.9% | Oct 22, 2026 | Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unau... |
| CVE-2026-109122 | CRITICAL | 9.1 | 0.4% | Oct 22, 2026 | The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when config... |
| CVE-2026-108456 | HIGH | 7.7 | 0.7% | Oct 22, 2026 | Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a networ... |
| CVE-2026-105265 | MEDIUM | 5.3 | 0.4% | Oct 22, 2026 | A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an auth... |
| CVE-2026-105014 | CRITICAL | 9.1 | 0.7% | Oct 22, 2026 | Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unautho... |
| CVE-2026-115419 | HIGH | 8.1 | 0.4% | Oct 22, 2026 | The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScr... |
| CVE-2026-115417 | HIGH | 7.5 | 0.4% | Oct 22, 2026 | Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 migh... |