CVE Vulnerability Database
Search and browse 420,973 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-76788 | HIGH | 8.8 | 0.2% | Oct 19, 2026 | The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes replies from a Periph... |
| CVE-2026-76787 | MEDIUM | 5.9 | 0.4% | Oct 19, 2026 | The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl_updatehub... |
| CVE-2026-112395 | HIGH | 8.2 | 0.5% | Oct 19, 2026 | Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer w... |
| CVE-2026-112394 | HIGH | 8.2 | 0.5% | Oct 19, 2026 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an inp... |
| CVE-2026-112393 | CRITICAL | 9.8 | 0.8% | Oct 19, 2026 | Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure... |
| CVE-2026-112391 | HIGH | 7.5 | 0.3% | Oct 19, 2026 | Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recurse without a limit ... |
| CVE-2026-112390 | HIGH | 7.5 | 0.3% | Oct 19, 2026 | Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the fra... |
| CVE-2026-112302 | MEDIUM | 6.3 | 0.4% | Oct 19, 2026 | A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the... |
| CVE-2026-112301 | HIGH | 7.3 | 2.0% | Oct 19, 2026 | A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Comm... |
| CVE-2026-112300 | MEDIUM | 5.3 | 0.4% | Oct 19, 2026 | A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function _sectionm... |
| CVE-2026-112299 | MEDIUM | 4.3 | 0.4% | Oct 19, 2026 | A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function ... |
| CVE-2026-111946 | MEDIUM | 5.3 | 0.2% | Oct 19, 2026 | Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header. ... |
| CVE-2026-82166 | HIGH | 8.8 | — | Oct 19, 2026 | Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerabilit... |
| CVE-2026-71170 | HIGH | 7.8 | 0.2% | Oct 19, 2026 | Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileg... |
| CVE-2026-71169 | HIGH | 7 | 0.1% | Oct 19, 2026 | Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vu... |
| CVE-2026-112782 | HIGH | 7.5 | 0.3% | Oct 19, 2026 | Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability that allows anonymo... |
| CVE-2026-112781 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read protected... |
| CVE-2026-112780 | HIGH | 8.8 | 0.3% | Oct 19, 2026 | Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary publ... |
| CVE-2026-112779 | CRITICAL | 9.8 | 0.3% | Oct 19, 2026 | Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed langua... |
| CVE-2026-112778 | HIGH | 8.8 | 0.2% | Oct 19, 2026 | Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in th... |
| CVE-2026-112777 | HIGH | 7.2 | 0.5% | Oct 19, 2026 | Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() function because its ... |
| CVE-2026-112776 | CRITICAL | 9.8 | 0.3% | Oct 19, 2026 | Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-scoped GraphQL tokens... |
| CVE-2026-112775 | HIGH | 7.5 | 0.3% | Oct 19, 2026 | Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse verifi... |
| CVE-2026-112774 | HIGH | 7.2 | 0.5% | Oct 19, 2026 | Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated administrato... |
| CVE-2026-112773 | HIGH | 8.8 | — | Oct 19, 2026 | Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Pane... |