CVE Vulnerability Database
Search and browse 423,461 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-3628 | MEDIUM | 5.3 | 0.3% | Oct 19, 2026 | IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions. |
| CVE-2026-3303 | LOW | 3.7 | 0.2% | Oct 19, 2026 | IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privi... |
| CVE-2026-3295 | MEDIUM | 5.4 | 0.2% | Oct 19, 2026 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not ... |
| CVE-2026-3161 | HIGH | 7.5 | 0.2% | Oct 19, 2026 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacke... |
| CVE-2026-1510 | MEDIUM | 4.7 | 0.1% | Oct 19, 2026 | IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection. |
| CVE-2026-1501 | LOW | 3.7 | 0.1% | Oct 19, 2026 | IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation. |
| CVE-2026-11319 | MEDIUM | 6.2 | 0.1% | Oct 19, 2026 | TickTick Android application (com.ticktick.task) 8.2.2.0 contains a path traversal vulnerability in its exported ShareRe... |
| CVE-2026-112377 | HIGH | 7.4 | 0.2% | Oct 19, 2026 | CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connecti... |
| CVE-2026-112248 | MEDIUM | 4.7 | — | Oct 19, 2026 | A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the function ProductImportD... |
| CVE-2026-112247 | MEDIUM | 4.3 | 0.3% | Oct 19, 2026 | A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information Sys... |
| CVE-2026-111759 | HIGH | 7.5 | — | Oct 19, 2026 | markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, specially crafted Markd... |
| CVE-2026-111757 | MEDIUM | 5.3 | 0.2% | Oct 19, 2026 | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.4 until 4.13.11, serveSt... |
| CVE-2026-111755 | HIGH | 8.2 | — | Oct 19, 2026 | follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16... |
| CVE-2026-107084 | HIGH | 8.8 | 0.3% | Oct 19, 2026 | Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules... |
| CVE-2026-105810 | HIGH | 8.5 | 0.2% | Oct 19, 2026 | Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path.... |
| CVE-2025-60480 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-D... |
| CVE-2025-55667 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-... |
| CVE-2025-55654 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box v2.4 allows attacker... |
| CVE-2025-52290 | HIGH | 7.5 | 0.6% | Oct 19, 2026 | A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 all... |
| CVE-2023-38375 | MEDIUM | 6.1 | 0.2% | Oct 19, 2026 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embe... |
| CVE-2026-6930 | HIGH | 7.5 | 0.1% | Oct 19, 2026 | IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt... |
| CVE-2026-15661 | MEDIUM | 5.3 | 0.2% | Oct 19, 2026 | IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutrali... |
| CVE-2026-14511 | MEDIUM | 6.5 | 0.4% | Oct 19, 2026 | IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially cra... |
| CVE-2026-12727 | MEDIUM | 4.3 | 0.2% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow... |
| CVE-2026-12670 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that trigg... |