CVE Vulnerability Database
Search and browse 420,601 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111816 | CRITICAL | 9.3 | 0.3% | Oct 21, 2026 | Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Tr... |
| CVE-2026-111813 | CRITICAL | 10 | 0.5% | Oct 21, 2026 | Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments ... |
| CVE-2026-111804 | HIGH | 8.2 | 0.2% | Oct 21, 2026 | Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unva... |
| CVE-2026-111401 | MEDIUM | 6.5 | 0.2% | Oct 21, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Tailored Media Tailored Tools tailored-tools allows Cross Site Reques... |
| CVE-2026-110803 | HIGH | 8.7 | 0.3% | Oct 21, 2026 | VaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter outside t... |
| CVE-2026-107588 | HIGH | 8.4 | 0.5% | Oct 21, 2026 | Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in Vaadin 22 to 24 and 1... |
| CVE-2026-105945 | HIGH | 7.7 | 0.5% | Oct 21, 2026 | The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by usin... |
| CVE-2026-105944 | CRITICAL | 10 | 0.7% | Oct 21, 2026 | Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts and login,... |
| CVE-2026-105942 | HIGH | 7.7 | 0.4% | Oct 21, 2026 | When a configured proxy role sends a request to the broker on behalf of another user (the original principal), the broke... |
| CVE-2026-105938 | LOW | 2.3 | 0.5% | Oct 21, 2026 | Apache Pulsar namespaces can restrict which roles may use a subscription, either with the Prefix subscription authentica... |
| CVE-2026-105937 | HIGH | 8.7 | 0.2% | Oct 21, 2026 | Apache Pulsar shadow topics (PIP-180) are topics that read the stored messages of a source topic from that topic's manag... |
| CVE-2026-105936 | MEDIUM | 5.3 | 0.4% | Oct 21, 2026 | The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO connectors installed on... |
| CVE-2026-105935 | MEDIUM | 4.9 | 0.4% | Oct 21, 2026 | The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied va... |
| CVE-2026-105934 | HIGH | 7.2 | 0.5% | Oct 21, 2026 | The Apache Pulsar broker admin REST API provides a truncate operation for persistent topics (DELETE /admin/v2/persistent... |
| CVE-2026-105933 | LOW | 2.3 | 0.3% | Oct 21, 2026 | Apache Pulsar allows an administrator to require end-to-end message encryption for all topics in a namespace by setting ... |
| CVE-2026-105932 | LOW | 2.3 | 0.5% | Oct 21, 2026 | The Apache Pulsar broker admin REST API provides endpoints to read, set and remove the topic-level entry filter policy o... |
| CVE-2026-105931 | LOW | 2.3 | 0.5% | Oct 21, 2026 | The Apache Pulsar broker exposes a transaction administration REST API under /admin/v3/transactions. When authentication... |
| CVE-2025-55702 | HIGH | 8.7 | 0.3% | Oct 21, 2026 | When a client sends a POST with Expect: 100-continue and the origin answers before reading the body, Apache Traffic Serv... |
| CVE-2025-31699 | HIGH | 8.9 | 0.3% | Oct 21, 2026 | Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request ... |
| CVE-2026-92210 | HIGH | 7.2 | 0.3% | Oct 21, 2026 | NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attac... |
| CVE-2026-92209 | HIGH | 7.8 | 0.2% | Oct 21, 2026 | NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attack... |
| CVE-2026-92208 | HIGH | 8.8 | 0.6% | Oct 21, 2026 | NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacen... |
| CVE-2026-92207 | HIGH | 8.8 | 0.7% | Oct 21, 2026 | MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to ex... |
| CVE-2026-92206 | HIGH | 8.8 | 0.5% | Oct 21, 2026 | CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability. This vulnerability allows r... |
| CVE-2026-92205 | MEDIUM | 6.1 | 0.3% | Oct 21, 2026 | BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote a... |