CVE Vulnerability Database
Search and browse 423,431 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-112892 | HIGH | 7.5 | 0.4% | Oct 19, 2026 | Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a small file into an un... |
| CVE-2026-112891 | HIGH | 7.5 | 0.5% | Oct 19, 2026 | Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a ... |
| CVE-2026-112406 | HIGH | 7.5 | 0.4% | Oct 19, 2026 | Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while rewriting PDF pages... |
| CVE-2026-112405 | HIGH | 7.5 | 0.4% | Oct 19, 2026 | Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference a null image8 plane... |
| CVE-2026-112404 | HIGH | 8.2 | 0.4% | Oct 19, 2026 | Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond ro... |
| CVE-2026-112403 | CRITICAL | 9.8 | 0.8% | Oct 19, 2026 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer... |
| CVE-2026-112402 | HIGH | 7.5 | 0.5% | Oct 19, 2026 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encount... |
| CVE-2026-112401 | HIGH | 7.5 | 0.5% | Oct 19, 2026 | Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comment... |
| CVE-2026-112400 | HIGH | 7.5 | 0.5% | Oct 19, 2026 | Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a decompr... |
| CVE-2026-112399 | HIGH | 7.5 | 0.5% | Oct 19, 2026 | Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full... |
| CVE-2026-112398 | CRITICAL | 9.8 | 0.6% | Oct 19, 2026 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines bey... |
| CVE-2026-112397 | HIGH | 7.5 | 0.5% | Oct 19, 2026 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row ... |
| CVE-2026-112396 | HIGH | 7.5 | 0.6% | Oct 19, 2026 | Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a ta... |
| CVE-2026-112392 | HIGH | 7.5 | 0.5% | Oct 19, 2026 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage f... |
| CVE-2026-112361 | MEDIUM | 6.3 | — | Oct 19, 2026 | A vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown function of the file htdocs/... |
| CVE-2026-112360 | HIGH | 8 | 0.4% | Oct 19, 2026 | A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of... |
| CVE-2026-112358 | MEDIUM | 4.1 | 0.3% | Oct 19, 2026 | A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability af... |
| CVE-2026-112261 | HIGH | 7.8 | 0.2% | Oct 19, 2026 | A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-aft... |
| CVE-2026-112258 | HIGH | 7.8 | 0.2% | Oct 19, 2026 | A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel ... |
| CVE-2026-112257 | HIGH | 7.8 | 0.2% | Oct 19, 2026 | A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte strid... |
| CVE-2026-105815 | HIGH | 7.1 | 0.2% | Oct 19, 2026 | TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON... |
| CVE-2026-105814 | MEDIUM | 5.3 | 0.2% | Oct 19, 2026 | TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request conta... |
| CVE-2024-54657 | — | — | — | Oct 19, 2026 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. |
| CVE-2024-54656 | — | — | — | Oct 19, 2026 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. |
| CVE-2024-54655 | — | — | — | Oct 19, 2026 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. |