CVE Vulnerability Database
Search and browse 420,973 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111762 | MEDIUM | 5.7 | 0.2% | Oct 20, 2026 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequest... |
| CVE-2026-111761 | MEDIUM | 5.8 | 0.5% | Oct 20, 2026 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, BasePushNotificationSend... |
| CVE-2026-96582 | MEDIUM | 4.9 | — | Oct 20, 2026 | A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow. The USBX host w... |
| CVE-2026-96406 | MEDIUM | 4.9 | — | Oct 20, 2026 | A VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTotalLength` field of ... |
| CVE-2026-93446 | HIGH | 7.5 | 0.3% | Oct 20, 2026 | Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue ... |
| CVE-2026-91041 | HIGH | 7.8 | — | Oct 20, 2026 | Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log rep... |
| CVE-2026-88041 | HIGH | 7.5 | 0.3% | Oct 20, 2026 | Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a ... |
| CVE-2026-80353 | HIGH | 8.1 | 0.2% | Oct 20, 2026 | Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for t... |
| CVE-2026-74049 | MEDIUM | 6.1 | 0.3% | Oct 20, 2026 | Execution After Redirect (EAR) vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 throu... |
| CVE-2026-74048 | MEDIUM | 6.5 | 0.2% | Oct 20, 2026 | Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to u... |
| CVE-2026-113396 | HIGH | 7.4 | — | Oct 20, 2026 | A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename_t... |
| CVE-2026-113395 | HIGH | 7.4 | — | Oct 20, 2026 | A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgi... |
| CVE-2026-113394 | HIGH | 7.4 | 0.3% | Oct 20, 2026 | A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the... |
| CVE-2026-113393 | MEDIUM | 6.3 | — | Oct 20, 2026 | A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of... |
| CVE-2026-103119 | CRITICAL | 9.1 | — | Oct 20, 2026 | Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body... |
| CVE-2026-101356 | CRITICAL | 9.1 | — | Oct 20, 2026 | Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlet... |
| CVE-2026-101296 | HIGH | 8.1 | 0.6% | Oct 20, 2026 | A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a ... |
| CVE-2026-34485 | HIGH | 7.8 | 0.2% | Oct 20, 2026 | Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated atta... |
| CVE-2026-34484 | MEDIUM | 6.7 | 0.1% | Oct 20, 2026 | Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrat... |
| CVE-2026-113620 | CRITICAL | 9.8 | — | Oct 20, 2026 | In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not ... |
| CVE-2026-113619 | HIGH | 7.5 | — | Oct 20, 2026 | In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template sub... |
| CVE-2026-113470 | MEDIUM | 5.4 | 0.2% | Oct 20, 2026 | Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in... |
| CVE-2026-113401 | MEDIUM | 6.5 | — | Oct 20, 2026 | Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1. |
| CVE-2026-113400 | MEDIUM | 5.4 | — | Oct 20, 2026 | Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbir... |
| CVE-2026-113399 | CRITICAL | 9.8 | 0.2% | Oct 20, 2026 | Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.... |