CVE Vulnerability Database
Search and browse 420,635 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-113740 | MEDIUM | 6.3 | 0.2% | Oct 21, 2026 | A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerability is an unknown func... |
| CVE-2026-113738 | MEDIUM | 6.3 | 0.4% | Oct 21, 2026 | A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09.... |
| CVE-2026-113737 | MEDIUM | 5.5 | 0.3% | Oct 21, 2026 | A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This aff... |
| CVE-2026-113736 | CRITICAL | 9.8 | 0.9% | Oct 21, 2026 | A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap o... |
| CVE-2026-111943 | MEDIUM | 6.8 | 0.3% | Oct 21, 2026 | On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores ... |
| CVE-2026-105044 | HIGH | 8.5 | 0.9% | Oct 21, 2026 | Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingte... |
| CVE-2025-71437 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that allow... |
| CVE-2021-48020 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when... |
| CVE-2021-48019 | MEDIUM | 4.8 | 0.2% | Oct 21, 2026 | Vyper before 0.2.9 deploys forwarder proxies through the built-in create_forwarder_to function that report a fixed 4096-... |
| CVE-2021-48018 | HIGH | 7.4 | 0.3% | Oct 21, 2026 | Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as cont... |
| CVE-2020-37289 | LOW | 3.7 | 0.3% | Oct 21, 2026 | Vyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such as ERC20.decimals(), to ... |
| CVE-2020-37288 | LOW | 3.7 | 0.3% | Oct 21, 2026 | Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal functi... |
| CVE-2020-37287 | MEDIUM | 5.9 | 0.3% | Oct 21, 2026 | Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function outputs when complex ty... |
| CVE-2020-37286 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when... |
| CVE-2026-113735 | LOW | 3.7 | 0.6% | Oct 21, 2026 | A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink_set_... |
| CVE-2026-113707 | MEDIUM | 5.4 | 0.3% | Oct 21, 2026 | A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4. The affected element is the function InMemoryTaskS... |
| CVE-2026-113706 | LOW | 3.5 | 0.3% | Oct 21, 2026 | A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/... |
| CVE-2026-109682 | MEDIUM | 4.7 | 0.2% | Oct 21, 2026 | Metasploit Framework versions before 6.5.7 allow HTTP requests made through send_request_cgi! to follow redirects to a d... |
| CVE-2026-109681 | MEDIUM | 4.7 | 0.2% | Oct 21, 2026 | The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rog... |
| CVE-2026-6945 | — | — | — | Oct 20, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-113705 | MEDIUM | 5.3 | 0.3% | Oct 20, 2026 | A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file ... |
| CVE-2026-112202 | MEDIUM | 6.5 | 0.2% | Oct 20, 2026 | Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images. With `gif_con... |
| CVE-2026-9825 | LOW | 3.7 | 0.3% | Oct 20, 2026 | IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over une... |
| CVE-2026-94402 | MEDIUM | 6.1 | 0.2% | Oct 20, 2026 | IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Title.truncate... |
| CVE-2026-93888 | HIGH | 7.8 | 0.2% | Oct 20, 2026 | IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable ... |