CVE Vulnerability Database
Search and browse 420,581 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-115389 | LOW | 2.3 | 0.2% | Oct 22, 2026 | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not adequately account for host allocations... |
| CVE-2026-115388 | MEDIUM | 6.2 | 0.1% | Oct 22, 2026 | wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not enforce the wasi:... |
| CVE-2026-115387 | MEDIUM | 6.2 | 0.1% | Oct 22, 2026 | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 contains a denial of service vulnerability in wa... |
| CVE-2026-115386 | LOW | 2.6 | 0.1% | Oct 22, 2026 | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an information disclosure vulnerability... |
| CVE-2026-115385 | MEDIUM | 6.2 | 0.1% | Oct 22, 2026 | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the wasmtime-wasi W... |
| CVE-2026-115384 | CRITICAL | 9.9 | 0.3% | Oct 22, 2026 | Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows malici... |
| CVE-2026-115383 | MEDIUM | 4.8 | 0.2% | Oct 22, 2026 | Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts compon... |
| CVE-2026-115382 | MEDIUM | 4.8 | 0.2% | Oct 22, 2026 | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:http imple... |
| CVE-2026-115381 | MEDIUM | 4.8 | 0.2% | Oct 22, 2026 | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an unbounded memory allocation in the w... |
| CVE-2026-115380 | MEDIUM | 4 | 0.1% | Oct 22, 2026 | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains a denial of service vulnerability in th... |
| CVE-2026-115379 | MEDIUM | 5.7 | 0.3% | Oct 22, 2026 | Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a missing GC rooting vulnerability that leaves reference... |
| CVE-2026-115378 | MEDIUM | 5.8 | 0.2% | Oct 22, 2026 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in sftpRec... |
| CVE-2026-115377 | CRITICAL | 9.9 | 0.4% | Oct 22, 2026 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allow... |
| CVE-2026-115376 | HIGH | 7.7 | 0.3% | Oct 22, 2026 | Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows project-restr... |
| CVE-2026-115375 | CRITICAL | 9.9 | 0.4% | Oct 22, 2026 | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to crea... |
| CVE-2026-115374 | HIGH | 7.1 | 0.2% | Oct 22, 2026 | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a signature verification flaw in its built-in S3 server that al... |
| CVE-2026-115373 | MEDIUM | 6.3 | 0.2% | Oct 22, 2026 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a missing authorization vulnerability in GET /1.... |
| CVE-2026-115372 | HIGH | 8.5 | 0.4% | Oct 22, 2026 | Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to set block.cr... |
| CVE-2026-115371 | HIGH | 7.1 | 0.2% | Oct 22, 2026 | Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an improper authorization vulnerability th... |
| CVE-2026-115370 | MEDIUM | 4.3 | 0.3% | Oct 22, 2026 | Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass vulnerability that a... |
| CVE-2026-115369 | LOW | 2.2 | 0.1% | Oct 22, 2026 | OpenBao from 2.5.0 before 2.6.2 fails to enforce the PKI role allowed_ip_sans_cidr restriction on IP SANs taken from a C... |
| CVE-2026-115366 | LOW | 2.6 | 0.2% | Oct 22, 2026 | OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged child-namespace ... |
| CVE-2026-115365 | MEDIUM | 6.6 | 0.3% | Oct 22, 2026 | OpenBao from 2.3.0 before 2.6.3 contains an incorrect authorization vulnerability in its ACL policy cache that allows to... |
| CVE-2026-115364 | LOW | 2.2 | 0.3% | Oct 22, 2026 | OpenBao before 2.6.3 contains a missing authorization check that allows attackers to stop Agent and Proxy services by om... |
| CVE-2026-115363 | LOW | 3.3 | 0.1% | Oct 22, 2026 | OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 contains an information disclosure vulnerability that exposes the tls_... |