CVE Vulnerability Database

Search and browse 420,601 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-82987HIGH7.5There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, ...
CVE-2026-29001HIGH7.2TastyIgniter through 4.4.5 contains a PHP object injection vulnerability that allows authenticated administrators to ach...
CVE-2026-114406MEDIUM6.8The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included ...
CVE-2026-114380MEDIUM6.3A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /...
CVE-2026-114379MEDIUM5.4A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6. This vulnerability affects the function saveGeneratedImage...
CVE-2026-114378MEDIUM6.3A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /...
CVE-2026-114377LOW3.8A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.1. Affected by this issue is the functio...
CVE-2026-114145HIGH7.5GitPython is a python library used to interact with Git repositories. Prior to 3.2.1, create_submodule() in git/objects/...
CVE-2026-114144HIGH7.5toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() passes unbounded hexadecimal, octal...
CVE-2026-114143HIGH8.7toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() repeatedly slices and rejoins every...
CVE-2026-114142HIGH8.8toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() can write attacker-controlled prope...
CVE-2026-114141HIGH8.7toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse() compiler's addTableArray() func...
CVE-2026-114140HIGH8.8The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4...
CVE-2026-114139CRITICAL9.1Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10.75.2, and 11.0.0-rc.1, the web...
CVE-2026-114138HIGH7.5Django REST framework is a toolkit for building Web APIs. Prior to 3.18.2, DefaultContentNegotiation.get_accept_list in ...
CVE-2026-114137HIGH7.4Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framewor...
CVE-2026-113811HIGH7.5Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory exhaustion via a never-cleared failure s...
CVE-2026-85518MEDIUM6.1A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validat...
CVE-2026-114438MEDIUM4.2A flaw was found in the Update User Locale required action of the Keycloak identity and access management solution. When...
CVE-2026-114376MEDIUM6.3A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. Affected by this vulnerability is the function Sa...
CVE-2026-114375MEDIUM6.3A security flaw has been discovered in leomoon-studios wiki-go up to 1.9.1. Affected is the function RenameFileHandler o...
CVE-2026-114374MEDIUM4.3A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. This impacts an unknown function of the file inte...
CVE-2026-114362MEDIUM6.3A flaw has been found in HarnessRouter up to 0.31.12. This impacts an unknown function of the file gateway/app.py of the...
CVE-2026-114136HIGH7.5Django REST framework is a toolkit for building Web APIs. From 3.6.4 until 3.18.2, JSONParser.parse in rest_framework/pa...
CVE-2026-114135HIGH8.8Jupyter Server is the backend for Jupyter web applications. From 2.0.0 until 2.6.0, enabling GatewayClient.url replaced ...