CVE Vulnerability Database
Search and browse 420,601 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-112408 | HIGH | 8.1 | 0.7% | Oct 21, 2026 | Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SD... |
| CVE-2026-112381 | MEDIUM | 5.9 | 0.3% | Oct 21, 2026 | Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close w... |
| CVE-2026-111817 | MEDIUM | 5.3 | 0.3% | Oct 21, 2026 | Apache Traffic Server can stall a chunked transfer that it passes through with its trailers removed (proxy.config.http.d... |
| CVE-2026-111815 | CRITICAL | 10 | 0.2% | Oct 21, 2026 | Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate requir... |
| CVE-2026-111814 | CRITICAL | 10 | 0.2% | Oct 21, 2026 | Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authenticated with one cl... |
| CVE-2026-111812 | CRITICAL | 10 | 0.3% | Oct 21, 2026 | Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers und... |
| CVE-2026-111811 | CRITICAL | 9 | 0.4% | Oct 21, 2026 | Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write, and deletion of the s... |
| CVE-2026-111810 | HIGH | 7.5 | 0.3% | Oct 21, 2026 | Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled diagnostic log line for every internal @ header th... |
| CVE-2026-111809 | CRITICAL | 9.3 | 0.2% | Oct 21, 2026 | Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or Transfer-Encoding. This... |
| CVE-2026-111808 | HIGH | 8.6 | 0.3% | Oct 21, 2026 | Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a malformed padded HTTP/2 DATA frame. ... |
| CVE-2026-111805 | HIGH | 8.6 | 0.3% | Oct 21, 2026 | Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a truncated HTTP/2 Content-Length valu... |
| CVE-2026-79976 | HIGH | 7.1 | 0.3% | Oct 21, 2026 | The MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctp_i2c_gpio_target.c emulates a small pseudo-register file, ... |
| CVE-2026-78119 | MEDIUM | 6.3 | 0.1% | Oct 21, 2026 | The Nuvoton NPCX eSPI driver parses Target-Attached-Flash (TAF) requests in espi_taf_parse() (drivers/espi/espi_npcx.c),... |
| CVE-2026-78118 | HIGH | 7 | 0.1% | Oct 21, 2026 | The kernel helper z_waitq_head() (kernel/include/wait_q.h) reads the head of a thread wait queue, but on SMP systems it ... |
| CVE-2026-78117 | MEDIUM | 4.2 | 0.2% | Oct 21, 2026 | The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c stored the outgoing HCI packet ... |
| CVE-2026-78116 | MEDIUM | 5.2 | 0.2% | Oct 21, 2026 | The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails... |
| CVE-2026-19947 | MEDIUM | 5.3 | 0.1% | Oct 21, 2026 | The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmux_select_get() and d... |
| CVE-2026-19676 | HIGH | 7.8 | 0.2% | Oct 21, 2026 | The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in drivers/peci/peci_handlers.c, chec... |
| CVE-2026-18748 | LOW | 3.5 | 0.2% | Oct 21, 2026 | The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, a one-byte len field... |
| CVE-2026-114361 | MEDIUM | 5.6 | 0.3% | Oct 21, 2026 | A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the file gateway/app.py... |
| CVE-2026-114268 | CRITICAL | 9.9 | 0.5% | Oct 21, 2026 | A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of ... |
| CVE-2026-114267 | HIGH | 7.3 | 0.3% | Oct 21, 2026 | A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the ... |
| CVE-2026-114266 | MEDIUM | 6.3 | 0.2% | Oct 21, 2026 | A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the fun... |
| CVE-2026-113870 | HIGH | 8.8 | 0.2% | Oct 21, 2026 | MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editabl... |
| CVE-2026-113461 | MEDIUM | 5.2 | 0.1% | Oct 21, 2026 | Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library direct... |