CVE Vulnerability Database
Search and browse 423,412 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-113395 | HIGH | 7.4 | — | Oct 20, 2026 | A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgi... |
| CVE-2026-113394 | HIGH | 7.4 | 0.3% | Oct 20, 2026 | A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the... |
| CVE-2026-113393 | MEDIUM | 6.3 | — | Oct 20, 2026 | A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of... |
| CVE-2026-103119 | CRITICAL | 9.1 | — | Oct 20, 2026 | Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body... |
| CVE-2026-101356 | CRITICAL | 9.1 | — | Oct 20, 2026 | Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlet... |
| CVE-2026-101296 | HIGH | 8.1 | 0.6% | Oct 20, 2026 | A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a ... |
| CVE-2026-34485 | HIGH | 7.8 | 0.2% | Oct 20, 2026 | Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated atta... |
| CVE-2026-34484 | MEDIUM | 6.7 | 0.1% | Oct 20, 2026 | Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrat... |
| CVE-2026-113620 | CRITICAL | 9.8 | — | Oct 20, 2026 | In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not ... |
| CVE-2026-113619 | HIGH | 7.5 | — | Oct 20, 2026 | In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template sub... |
| CVE-2026-113470 | MEDIUM | 5.4 | 0.5% | Oct 20, 2026 | Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to... |
| CVE-2026-113401 | MEDIUM | 6.5 | — | Oct 20, 2026 | Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1. |
| CVE-2026-113400 | MEDIUM | 5.4 | — | Oct 20, 2026 | Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbir... |
| CVE-2026-113399 | CRITICAL | 9.8 | 0.2% | Oct 20, 2026 | Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.... |
| CVE-2026-113392 | HIGH | 7.4 | — | Oct 20, 2026 | A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the fil... |
| CVE-2026-113391 | CRITICAL | 9.9 | — | Oct 20, 2026 | A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the ... |
| CVE-2026-113390 | CRITICAL | 9.9 | 2.1% | Oct 20, 2026 | A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of th... |
| CVE-2026-105941 | HIGH | 8.1 | — | Oct 20, 2026 | The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes withou... |
| CVE-2026-18205 | MEDIUM | 6.1 | — | Oct 20, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax Informatic... |
| CVE-2026-14933 | HIGH | 8.6 | — | Oct 20, 2026 | Cross-site scripting in the embedded co-browsing feature in Unblu inc. Unblu Spark 7.0 through 7.57.7 and 8.0 through 8.... |
| CVE-2026-113583 | MEDIUM | 6.1 | 0.3% | Oct 20, 2026 | Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers ... |
| CVE-2026-113496 | MEDIUM | 5 | 0.1% | Oct 20, 2026 | A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings, the configured passw... |
| CVE-2026-113495 | MEDIUM | 5 | 0.2% | Oct 20, 2026 | A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens are passed as command... |
| CVE-2026-113389 | CRITICAL | 9.9 | — | Oct 20, 2026 | A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function ... |
| CVE-2026-113388 | MEDIUM | 4.3 | — | Oct 20, 2026 | A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the ... |