CVE Vulnerability Database
Search and browse 423,431 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-75128 | CRITICAL | 9.8 | 0.5% | Oct 20, 2026 | Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name with... |
| CVE-2026-65396 | MEDIUM | 5.5 | 0.2% | Oct 20, 2026 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoi... |
| CVE-2026-65379 | MEDIUM | 5.5 | 0.1% | Oct 20, 2026 | The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS... |
| CVE-2026-65372 | MEDIUM | 4.7 | 0.1% | Oct 20, 2026 | A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15... |
| CVE-2026-65356 | MEDIUM | 5.5 | 0.1% | Oct 20, 2026 | An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia ... |
| CVE-2026-28854 | HIGH | 7.5 | 0.2% | Oct 20, 2026 | The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A mali... |
| CVE-2026-28853 | HIGH | 7.8 | 0.1% | Oct 20, 2026 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be... |
| CVE-2026-28850 | MEDIUM | 5.5 | 0.1% | Oct 20, 2026 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.8, visionOS... |
| CVE-2026-109444 | CRITICAL | 9.8 | 0.5% | Oct 20, 2026 | OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run... |
| CVE-2026-109443 | HIGH | 8.8 | 0.7% | Oct 20, 2026 | JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating... |
| CVE-2026-109442 | CRITICAL | 9.8 | 0.7% | Oct 20, 2026 | piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat... |
| CVE-2026-109441 | MEDIUM | 5.8 | 0.4% | Oct 20, 2026 | LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on... |
| CVE-2026-109440 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute... |
| CVE-2026-109395 | CRITICAL | 9.1 | 0.4% | Oct 20, 2026 | Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based Unsafe... |
| CVE-2026-105298 | MEDIUM | 6.3 | 0.4% | Oct 20, 2026 | Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-... |
| CVE-2026-105297 | HIGH | 7.5 | 0.3% | Oct 20, 2026 | Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set i... |
| CVE-2026-8355 | MEDIUM | 5.4 | 0.2% | Oct 20, 2026 | IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authe... |
| CVE-2026-112373 | MEDIUM | 6.5 | 0.4% | Oct 20, 2026 | A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the f... |
| CVE-2026-109126 | HIGH | 8.8 | 0.2% | Oct 20, 2026 | IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate... |
| CVE-2026-107400 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary co... |
| CVE-2026-107366 | HIGH | 8.3 | 0.3% | Oct 20, 2026 | IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authe... |
| CVE-2026-105453 | HIGH | 8.4 | 0.1% | Oct 20, 2026 | IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to... |
| CVE-2026-77684 | MEDIUM | 5.7 | 0.3% | Oct 19, 2026 | The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT comma... |
| CVE-2026-19595 | MEDIUM | 6.1 | 0.1% | Oct 19, 2026 | The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two out... |
| CVE-2026-19178 | MEDIUM | 6.8 | 0.2% | Oct 19, 2026 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized adm... |