CVE Vulnerability Database

Search and browse 420,973 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-112400HIGH7.5Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a decompr...
CVE-2026-112399HIGH7.5Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full...
CVE-2026-112398CRITICAL9.8Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines bey...
CVE-2026-112397HIGH7.5Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row ...
CVE-2026-112396HIGH7.5Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a ta...
CVE-2026-112392HIGH7.5Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage f...
CVE-2026-112361MEDIUM6.3A vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown function of the file htdocs/...
CVE-2026-112360HIGH8A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of...
CVE-2026-112358MEDIUM4.1A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability af...
CVE-2026-112261HIGH7.8A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-aft...
CVE-2026-112258HIGH7.8A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel ...
CVE-2026-112257HIGH7.8A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte strid...
CVE-2026-105815HIGH7.1TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON...
CVE-2026-105814MEDIUM5.3TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request conta...
CVE-2024-54657——Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.
CVE-2024-54656——Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.
CVE-2024-54655——Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.
CVE-2024-54654——Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.
CVE-2024-54653——Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.
CVE-2024-54652——Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.
CVE-2024-54651——Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.
CVE-2024-54650——Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.
CVE-2024-54649——Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.
CVE-2024-54648——Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.
CVE-2024-54647——Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.