CVE Vulnerability Database
Search and browse 420,973 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-107084 | HIGH | 8.8 | 0.3% | Oct 19, 2026 | Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules... |
| CVE-2026-105810 | HIGH | 8.5 | 0.2% | Oct 19, 2026 | Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path.... |
| CVE-2025-60480 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-D... |
| CVE-2025-55667 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-... |
| CVE-2025-55654 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box v2.4 allows attacker... |
| CVE-2025-52290 | HIGH | 7.5 | 0.6% | Oct 19, 2026 | A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 all... |
| CVE-2023-38375 | MEDIUM | 6.1 | 0.2% | Oct 19, 2026 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embe... |
| CVE-2026-6930 | HIGH | 7.5 | 0.1% | Oct 19, 2026 | IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt... |
| CVE-2026-15661 | MEDIUM | 5.3 | 0.2% | Oct 19, 2026 | IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutrali... |
| CVE-2026-14511 | MEDIUM | 6.5 | 0.4% | Oct 19, 2026 | IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially cra... |
| CVE-2026-12727 | MEDIUM | 4.3 | 0.2% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow... |
| CVE-2026-12670 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that trigg... |
| CVE-2026-12669 | MEDIUM | 4.3 | 0.2% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed dat... |
| CVE-2026-12665 | CRITICAL | 9.8 | 0.2% | Oct 19, 2026 | IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certif... |
| CVE-2026-12660 | LOW | 2.7 | 0.2% | Oct 19, 2026 | IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to impro... |
| CVE-2026-12350 | MEDIUM | 6.5 | 0.3% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous co... |
| CVE-2026-12343 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message hea... |
| CVE-2026-12155 | MEDIUM | 6.5 | 0.3% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status ... |
| CVE-2026-12148 | HIGH | 8.8 | 0.3% | Oct 19, 2026 | IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code... |
| CVE-2026-11831 | MEDIUM | 5.4 | 0.2% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information ab... |
| CVE-2026-11829 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in... |
| CVE-2026-11828 | MEDIUM | 5.9 | 0.3% | Oct 19, 2026 | IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to c... |
| CVE-2026-112195 | MEDIUM | 4.7 | — | Oct 19, 2026 | A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/... |
| CVE-2026-112193 | LOW | 3.7 | 0.4% | Oct 19, 2026 | A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of the file plugins/webku... |
| CVE-2026-112190 | MEDIUM | 5.3 | — | Oct 19, 2026 | A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing ... |