CVE Vulnerability Database
Search and browse 420,635 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-114063 | HIGH | 7.5 | 0.4% | Oct 21, 2026 | SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview server on... |
| CVE-2026-114062 | MEDIUM | 5.3 | 0.3% | Oct 21, 2026 | SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach intern... |
| CVE-2026-114061 | MEDIUM | 4.7 | 0.2% | Oct 21, 2026 | SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in prerendered pages because a cach... |
| CVE-2026-114060 | MEDIUM | 4.7 | 0.2% | Oct 21, 2026 | SvelteKit (@sveltejs/kit) before 3.0.0 contains an open redirect vulnerability in enhanced form actions (use:enhance) on... |
| CVE-2026-114059 | HIGH | 7.5 | 0.4% | Oct 21, 2026 | ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allows authenticated users, including read-o... |
| CVE-2026-114058 | MEDIUM | 4.3 | 0.2% | Oct 21, 2026 | ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that let... |
| CVE-2026-114057 | MEDIUM | 4.3 | 0.2% | Oct 21, 2026 | ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that all... |
| CVE-2026-114056 | MEDIUM | 4.3 | 0.2% | Oct 21, 2026 | ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify... |
| CVE-2026-114055 | HIGH | 7.5 | 0.4% | Oct 21, 2026 | vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability that allows remote clients to ... |
| CVE-2026-114054 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache k... |
| CVE-2026-114053 | HIGH | 8.1 | 0.5% | Oct 21, 2026 | vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProces... |
| CVE-2026-114052 | HIGH | 7.5 | 0.5% | Oct 21, 2026 | vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving that caches a... |
| CVE-2026-114051 | HIGH | 7.5 | 0.4% | Oct 21, 2026 | vLLM before 0.31.0 skips the min_tokens <= max_tokens check for /inference/v1/generate requests with a null max_tokens, ... |
| CVE-2026-114050 | HIGH | 7.5 | 0.2% | Oct 21, 2026 | vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on cache ... |
| CVE-2026-114049 | LOW | 3.7 | 0.3% | Oct 21, 2026 | vLLM before 0.31.0 contains a cross-request mask leak in InputBatch.condense() that allows remote attackers to constrain... |
| CVE-2026-114048 | LOW | 3.5 | 0.1% | Oct 21, 2026 | WWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in legacy endpoints like playlistStatus.php ... |
| CVE-2026-114047 | MEDIUM | 6.8 | 0.2% | Oct 21, 2026 | FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts unt... |
| CVE-2026-114046 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null p... |
| CVE-2026-114045 | HIGH | 8.8 | 0.5% | Oct 21, 2026 | FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparo... |
| CVE-2026-114044 | MEDIUM | 5.3 | 0.3% | Oct 21, 2026 | FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP s... |
| CVE-2026-114043 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because winp... |
| CVE-2026-114042 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the ow... |
| CVE-2026-114041 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a ... |
| CVE-2026-114038 | MEDIUM | 5.1 | 0.1% | Oct 21, 2026 | A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a ... |
| CVE-2026-113741 | MEDIUM | 4.3 | — | Oct 21, 2026 | A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown f... |