CVE Vulnerability Database

Search and browse 420,818 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-113718HIGH7.1virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote()...
CVE-2026-113717LOW2.3virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInvoke.get_pip_install_cmd(...
CVE-2026-113716MEDIUM4.5virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the builtin creator calls ensu...
CVE-2026-113715LOW2virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads ...
CVE-2026-112380CRITICAL9.9Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operat...
CVE-2026-107692MEDIUM4.8The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet after the...
CVE-2026-97406CRITICAL9.1XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token ...
CVE-2026-75997——Rejected reason: this CVE was issued in error.
CVE-2026-75751——Rejected reason: this CVE was issued in error.
CVE-2026-75747——Rejected reason: this CVE was issued in error.
CVE-2026-48279——Rejected reason: this CVE was issued in error.
CVE-2026-21356——Rejected reason: this CVE was issued in error.
CVE-2026-21270——Rejected reason: this CVE was issued in error.
CVE-2026-21266——Rejected reason: this CVE was issued in error.
CVE-2026-113810HIGH7A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attack...
CVE-2026-113808HIGH7.1A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attack...
CVE-2026-113714LOW2.3virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, download_wheel() writes packag...
CVE-2026-113713MEDIUM4.4virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder...
CVE-2026-113712MEDIUM4.8Cachet is an open-source status page system. Versions 2.4.1 and earlier have a stored Cross-Site Scripting (XSS) vulnera...
CVE-2026-113709CRITICAL9.9Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3....
CVE-2026-113708CRITICAL9.9Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3....
CVE-2026-113643MEDIUM4.3A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProvider::get of the fil...
CVE-2026-111767HIGH8.6MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to...
CVE-2026-111088MEDIUM6.5A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen.
CVE-2026-100134HIGH8.8Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th...