CVE Vulnerability Database
Search and browse 423,436 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-112251 | MEDIUM | 4.3 | — | Oct 19, 2026 | A vulnerability was detected in antoinersx clawhost up to 0.0.45. This affects the function handleRequest of the file ap... |
| CVE-2026-112249 | LOW | 2.4 | 0.4% | Oct 19, 2026 | A vulnerability was detected in grandnode grandnode2 up to 2.3.0. Affected is the function Html.Raw of the file src/Web/... |
| CVE-2026-110688 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer pe... |
| CVE-2026-110687 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cm... |
| CVE-2026-110686 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding i... |
| CVE-2026-110685 | CRITICAL | 9.1 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in... |
| CVE-2026-110684 | HIGH | 8.1 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding value... |
| CVE-2026-110682 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level number... |
| CVE-2026-110681 | HIGH | 8.1 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a n... |
| CVE-2026-110680 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during can... |
| CVE-2026-110678 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in i... |
| CVE-2026-110677 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as... |
| CVE-2026-110676 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal dig... |
| CVE-2026-110675 | HIGH | 8.1 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in... |
| CVE-2026-110674 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion und... |
| CVE-2026-110673 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decod... |
| CVE-2026-110672 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key or a missi... |
| CVE-2026-109437 | CRITICAL | 9.8 | 0.6% | Oct 19, 2026 | Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sand... |
| CVE-2026-109434 | MEDIUM | 4.3 | — | Oct 19, 2026 | Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to im... |
| CVE-2025-60482 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1... |
| CVE-2026-6719 | HIGH | 7.5 | 0.3% | Oct 19, 2026 | IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt... |
| CVE-2026-55644 | MEDIUM | 5.1 | 0.3% | Oct 19, 2026 | Element X iOS is a Matrix iOS Client provided by Element. Element X iOS before version 26.05.0 fails to check the URL al... |
| CVE-2026-4418 | MEDIUM | 5.4 | 0.2% | Oct 19, 2026 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could injec... |
| CVE-2026-4413 | MEDIUM | 6.1 | 0.2% | Oct 19, 2026 | IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attack... |
| CVE-2026-4405 | LOW | 3.3 | 0.2% | Oct 19, 2026 | IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system... |