CVE Vulnerability Database
Search and browse 381,217 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-6540 | HIGH | 7.5 | 0.4% | Jul 30, 2026 | Calico's Application Layer Policy (disabled by default), which enforces HTTP rules through Dikastes, fails to perform UR... |
| CVE-2026-67349 | HIGH | 8.7 | 0.3% | Jul 30, 2026 | OpenCost before 1.121.0 fails to authenticate the GET /helmValues endpoint, exposing base64-decoded HELM_VALUES environm... |
| CVE-2026-67348 | HIGH | 8.6 | — | Jul 30, 2026 | Julep contains an insecure direct object reference vulnerability in the get_execution_details endpoint that allows authe... |
| CVE-2026-67347 | MEDIUM | 6.8 | — | Jul 30, 2026 | Vendure through 3.7.1, fixed in commit f67ef5f, contains a cross-channel authorization bypass vulnerability in stock-loc... |
| CVE-2026-67346 | HIGH | 8.6 | — | Jul 30, 2026 | Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerability in the _is_safe_url ... |
| CVE-2026-67345 | HIGH | 8.5 | — | Jul 30, 2026 | MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirect URI validation vulnerability in Defaul... |
| CVE-2026-65635 | HIGH | 8.3 | — | Jul 30, 2026 | Improper Isolation or Compartmentalization vulnerability in malach-it boruta (Elixir.Boruta.Openid module) allows attack... |
| CVE-2026-54885 | MEDIUM | 6.9 | — | Jul 30, 2026 | Server-Side Request Forgery vulnerability in malach-it Boruta allows an unauthenticated remote attacker to cause the OAu... |
| CVE-2026-53431 | CRITICAL | 9.1 | — | Jul 30, 2026 | Authentication Bypass by Capture-replay vulnerability in malach-it Boruta allows an attacker who has obtained a previous... |
| CVE-2026-41187 | MEDIUM | 6.5 | 0.3% | Jul 30, 2026 | Calico's apiserver wraps tier-scoped resources so that every operation runs through AuthorizeTierOperation, but the Dele... |
| CVE-2026-41186 | HIGH | 7.5 | 0.2% | Jul 30, 2026 | When Calico's shared debug server is enabled (disabled by default), the Calico kube-controllers and Goldmane components ... |
| CVE-2026-16308 | HIGH | 7.5 | — | Jul 30, 2026 | IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quarkus REST could allow a remo... |
| CVE-2026-15435 | CRITICAL | 9.8 | 0.7% | Jul 30, 2026 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to t... |
| CVE-2026-14980 | HIGH | 8.8 | 0.2% | Jul 30, 2026 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which c... |
| CVE-2026-14522 | CRITICAL | 9.8 | 0.5% | Jul 30, 2026 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to e... |
| CVE-2026-14519 | HIGH | 7.5 | 0.6% | Jul 30, 2026 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to r... |
| CVE-2026-12947 | HIGH | 7.5 | — | Jul 30, 2026 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive infor... |
| CVE-2026-11980 | HIGH | 7.3 | 0.2% | Jul 30, 2026 | IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up. |
| CVE-2026-11897 | HIGH | 7.5 | 0.3% | Jul 30, 2026 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sen... |
| CVE-2026-11707 | CRITICAL | 9.3 | 0.2% | Jul 30, 2026 | IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site sc... |
| CVE-2026-11383 | MEDIUM | 5.4 | 0.2% | Jul 30, 2026 | IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scri... |
| CVE-2025-36431 | MEDIUM | 5.4 | 0.2% | Jul 30, 2026 | IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.0_1 is vulnera... |
| CVE-2025-36298 | MEDIUM | 5.4 | 0.2% | Jul 30, 2026 | IBM Sterling B2B Integrator 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0... |
| CVE-2026-67351 | HIGH | 8.8 | 0.4% | Jul 30, 2026 | Serendipity before 2.6.1 contains an authentication context confusion vulnerability where password validation and sessio... |
| CVE-2026-60075 | HIGH | 7.5 | 0.4% | Jul 30, 2026 | Date::Manip versions through 6.99 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substi... |