CVE Vulnerability Database
Search and browse 420,610 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-56386 | HIGH | 7.5 | 0.7% | Oct 21, 2026 | Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unauthenticated... |
| CVE-2026-54427 | HIGH | 7.5 | 0.2% | Oct 21, 2026 | Uncontrolled recursion in the AMF parser in Apache bRPC < 1.18.0 allows a remote RTMP peer to crash a bRPC process by se... |
| CVE-2026-54426 | HIGH | 7.5 | 0.2% | Oct 21, 2026 | Uncontrolled recursion in the Redis reply parser in Apache bRPC < 1.18.0 allows a remote Redis server peer to crash a bR... |
| CVE-2026-54425 | HIGH | 7.5 | 0.3% | Oct 21, 2026 | Uncontrolled recursion in the HTTP/2 HPACK decoder in Apache bRPC before 1.18.0 allows remote attackers to cause denial ... |
| CVE-2026-48830 | CRITICAL | 9.1 | 0.3% | Oct 21, 2026 | Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to bypass authentication ... |
| CVE-2026-114242 | HIGH | 7.3 | 0.3% | Oct 21, 2026 | A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/1253... |
| CVE-2026-87096 | LOW | 3.3 | 0.1% | Oct 21, 2026 | Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affec... |
| CVE-2026-87095 | CRITICAL | 9.1 | 0.2% | Oct 21, 2026 | Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affec... |
| CVE-2026-58663 | CRITICAL | 9.8 | 0.3% | Oct 21, 2026 | An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: f... |
| CVE-2026-41114 | HIGH | 7.5 | 0.2% | Oct 21, 2026 | Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC dri... |
| CVE-2026-110884 | HIGH | 7.1 | — | Oct 21, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in geekontheroad Live... |
| CVE-2026-110370 | HIGH | 8.8 | — | Oct 21, 2026 | Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object... |
| CVE-2026-110369 | HIGH | 8.8 | — | Oct 21, 2026 | Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows... |
| CVE-2026-105923 | MEDIUM | 4 | 0.1% | Oct 21, 2026 | A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Typ... |
| CVE-2026-97206 | HIGH | 7.5 | 0.3% | Oct 21, 2026 | NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by ... |
| CVE-2026-96405 | MEDIUM | 5.3 | 0.3% | Oct 21, 2026 | NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-na... |
| CVE-2026-85683 | HIGH | 8.8 | 0.3% | Oct 21, 2026 | The Jane Menu WordPress plugin before 1.5.1 does not have any capability or nonce checks on one of its form handlers, wh... |
| CVE-2026-70387 | HIGH | 8.4 | 0.3% | Oct 21, 2026 | Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android. The olc2 ... |
| CVE-2026-70386 | HIGH | 8.5 | 1.2% | Oct 21, 2026 | Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authorization vul... |
| CVE-2026-50106 | MEDIUM | 6.5 | 0.2% | Oct 21, 2026 | When NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root trust anchor and an additional... |
| CVE-2026-35501 | LOW | 3.7 | 0.1% | Oct 21, 2026 | When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an addi... |
| CVE-2026-14556 | MEDIUM | 5.4 | 0.2% | Oct 21, 2026 | The HappyForms WordPress plugin before 1.26.15 does not sanitise or escape a user-controlled referral value before embed... |
| CVE-2026-114236 | LOW | 3.3 | 0.1% | Oct 21, 2026 | storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file ... |
| CVE-2026-110938 | HIGH | 8.7 | 0.4% | Oct 21, 2026 | In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boun... |
| CVE-2026-109125 | MEDIUM | 5.3 | 0.2% | Oct 21, 2026 | In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'u... |