CVE Vulnerability Database
Search and browse 420,581 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105265 | MEDIUM | 5.3 | 0.4% | Oct 22, 2026 | A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an auth... |
| CVE-2026-105014 | CRITICAL | 9.1 | 0.7% | Oct 22, 2026 | Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unautho... |
| CVE-2026-115419 | HIGH | 8.1 | 0.4% | Oct 22, 2026 | The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScr... |
| CVE-2026-115417 | HIGH | 7.5 | 0.4% | Oct 22, 2026 | Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 migh... |
| CVE-2026-114625 | CRITICAL | 9.9 | 1.0% | Oct 22, 2026 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privile... |
| CVE-2026-114614 | LOW | 3.5 | 0.2% | Oct 22, 2026 | Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.securit... |
| CVE-2026-114583 | MEDIUM | 6.9 | 0.2% | Oct 22, 2026 | tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, ... |
| CVE-2026-115509 | MEDIUM | 4.2 | 0.2% | Oct 22, 2026 | Jitsu console before 2.14.0-beta.41 contains an incorrect authorization vulnerability in sources/state.ts handlers that ... |
| CVE-2026-115508 | MEDIUM | 6.5 | 0.3% | Oct 22, 2026 | Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server... |
| CVE-2026-115507 | LOW | 3.5 | 0.2% | Oct 22, 2026 | Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in pkg/notifications/m... |
| CVE-2026-115506 | HIGH | 7.5 | 0.5% | Oct 22, 2026 | libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTol... |
| CVE-2026-115505 | HIGH | 7.6 | 0.2% | Oct 22, 2026 | libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap ... |
| CVE-2026-115504 | HIGH | 7.8 | 0.1% | Oct 22, 2026 | CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-contr... |
| CVE-2026-115503 | MEDIUM | 5.5 | 0.1% | Oct 22, 2026 | Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstal... |
| CVE-2026-115398 | MEDIUM | 5.5 | 0.2% | Oct 22, 2026 | Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileS... |
| CVE-2026-112332 | HIGH | 7.5 | 0.6% | Oct 22, 2026 | Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a re... |
| CVE-2026-112331 | HIGH | 7.5 | 0.7% | Oct 22, 2026 | Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records... |
| CVE-2026-112330 | HIGH | 7.5 | 0.6% | Oct 22, 2026 | Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a co... |
| CVE-2026-95721 | LOW | 3.3 | 0.1% | Oct 22, 2026 | A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could a... |
| CVE-2026-95720 | MEDIUM | 4.4 | 0.1% | Oct 22, 2026 | A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to... |
| CVE-2026-95719 | MEDIUM | 4.9 | 0.3% | Oct 22, 2026 | An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticate... |
| CVE-2026-95718 | MEDIUM | 5.3 | 0.4% | Oct 22, 2026 | An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to c... |
| CVE-2026-95717 | MEDIUM | 5.5 | 0.3% | Oct 22, 2026 | A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow a... |
| CVE-2026-95716 | MEDIUM | 6.5 | 0.2% | Oct 22, 2026 | An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existi... |
| CVE-2026-95715 | MEDIUM | 6.8 | 1.6% | Oct 22, 2026 | An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitati... |