CVE Vulnerability Database
Search and browse 420,601 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-114439 | HIGH | 7.3 | 0.5% | Oct 21, 2026 | A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionali... |
| CVE-2026-106053 | — | — | — | Oct 21, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-103090 | HIGH | 8.8 | 0.3% | Oct 21, 2026 | Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control... |
| CVE-2026-100420 | MEDIUM | 6.8 | 0.2% | Oct 21, 2026 | A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers ... |
| CVE-2026-94423 | CRITICAL | 9.1 | 0.3% | Oct 21, 2026 | Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host ke... |
| CVE-2026-94140 | CRITICAL | 9.1 | 0.3% | Oct 21, 2026 | Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes St... |
| CVE-2026-91403 | CRITICAL | 9.1 | 0.4% | Oct 21, 2026 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE... |
| CVE-2026-114509 | CRITICAL | 9.2 | 0.8% | Oct 21, 2026 | Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based AP... |
| CVE-2026-114508 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read... |
| CVE-2026-114501 | MEDIUM | 5.3 | 0.4% | Oct 21, 2026 | Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly cont... |
| CVE-2026-114384 | MEDIUM | 6.3 | 0.3% | Oct 21, 2026 | A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown funct... |
| CVE-2026-114383 | CRITICAL | 10 | 0.7% | Oct 21, 2026 | A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file ... |
| CVE-2026-114382 | CRITICAL | 10 | 0.7% | Oct 21, 2026 | A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the ... |
| CVE-2026-114381 | MEDIUM | 6.3 | 0.3% | Oct 21, 2026 | A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown funct... |
| CVE-2026-112921 | HIGH | 7.3 | 0.2% | Oct 21, 2026 | Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher st... |
| CVE-2026-96778 | HIGH | 8.8 | 0.5% | Oct 21, 2026 | Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in src/libImaging/JpegEncode.c can call... |
| CVE-2026-96644 | HIGH | 8.1 | 0.4% | Oct 21, 2026 | Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or... |
| CVE-2026-96643 | MEDIUM | 6.5 | 0.4% | Oct 21, 2026 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image.py repeatedly slices the rema... |
| CVE-2026-96642 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal ... |
| CVE-2026-96641 | MEDIUM | 6.5 | 0.4% | Oct 21, 2026 | Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/_imaging.c checks positive g... |
| CVE-2026-96640 | HIGH | 7.5 | 0.5% | Oct 21, 2026 | Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py tre... |
| CVE-2026-96639 | CRITICAL | 9.8 | 0.7% | Oct 21, 2026 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation c... |
| CVE-2026-96638 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src/PIL/BmpImagePlugin.py permits... |
| CVE-2026-96637 | MEDIUM | 6.5 | 0.4% | Oct 21, 2026 | Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/SpiderImagePlugin.py reparses a l... |
| CVE-2026-96636 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek() and DcxImageFile.seek() reparse later MPO or DC... |