CVE Vulnerability Database
Search and browse 420,607 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-92210 | HIGH | 7.2 | 0.3% | Oct 21, 2026 | NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attac... |
| CVE-2026-92209 | HIGH | 7.8 | 0.2% | Oct 21, 2026 | NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attack... |
| CVE-2026-92208 | HIGH | 8.8 | 0.6% | Oct 21, 2026 | NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacen... |
| CVE-2026-92207 | HIGH | 8.8 | 0.7% | Oct 21, 2026 | MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to ex... |
| CVE-2026-92206 | HIGH | 8.8 | 0.5% | Oct 21, 2026 | CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability. This vulnerability allows r... |
| CVE-2026-92205 | MEDIUM | 6.1 | 0.3% | Oct 21, 2026 | BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote a... |
| CVE-2026-92204 | HIGH | 7.7 | 0.4% | Oct 21, 2026 | Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. Th... |
| CVE-2026-92203 | HIGH | 7.7 | 0.4% | Oct 21, 2026 | Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. ... |
| CVE-2026-92202 | HIGH | 7.8 | 0.2% | Oct 21, 2026 | Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability... |
| CVE-2026-92183 | HIGH | 7.8 | 0.4% | Oct 21, 2026 | GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote... |
| CVE-2026-89035 | HIGH | 7.4 | 0.3% | Oct 21, 2026 | MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows attac... |
| CVE-2026-114493 | HIGH | 8.6 | 0.4% | Oct 21, 2026 | LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that vali... |
| CVE-2026-114492 | MEDIUM | 6.5 | 0.4% | Oct 21, 2026 | gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to recursiv... |
| CVE-2026-114491 | MEDIUM | 5.3 | 0.3% | Oct 21, 2026 | pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy() restriction to images referenced inside SVG conten... |
| CVE-2026-114265 | MEDIUM | 6.3 | 0.2% | Oct 21, 2026 | A weakness has been identified in ProjectWorlds Advanced Library Management System 1.0. This affects the function mysqli... |
| CVE-2026-114264 | MEDIUM | 4.7 | 0.2% | Oct 21, 2026 | A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an ... |
| CVE-2026-114263 | HIGH | 7.3 | 0.3% | Oct 21, 2026 | A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the func... |
| CVE-2026-114262 | HIGH | 7.3 | 0.4% | Oct 21, 2026 | A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. Impacted is the funct... |
| CVE-2026-114176 | MEDIUM | 4.3 | — | Oct 21, 2026 | Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configu... |
| CVE-2026-114133 | MEDIUM | 5.4 | 0.2% | Oct 21, 2026 | Nuxt is an open-source web development framework for Vue.js. From 3.13.0 until 4.6.2, the server-island renderer seriali... |
| CVE-2026-114132 | MEDIUM | 6.3 | 0.3% | Oct 21, 2026 | Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.2, Nuxt resolves pages case-insensitively by d... |
| CVE-2026-114131 | MEDIUM | 6.5 | 0.4% | Oct 21, 2026 | Nuxt is an open-source web development framework for Vue.js. From 3.11.0 until 3.21.4 and 4.4.4, Nuxt compares route-rul... |
| CVE-2026-114130 | LOW | 2.3 | 0.4% | Oct 21, 2026 | Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.0, an incomplete fix for CVE-2026-53722 allows... |
| CVE-2026-114129 | MEDIUM | 6.2 | 0.2% | Oct 21, 2026 | stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. From ... |
| CVE-2026-114128 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | Astro is a web framework for content-driven websites. Prior to 7.3.2, Astro's JSX and MDX rendering pipeline treats stri... |