CVE Vulnerability Database
Search and browse 423,461 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-12669 | MEDIUM | 4.3 | 0.2% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed dat... |
| CVE-2026-12665 | CRITICAL | 9.8 | 0.2% | Oct 19, 2026 | IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certif... |
| CVE-2026-12660 | LOW | 2.7 | 0.2% | Oct 19, 2026 | IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to impro... |
| CVE-2026-12350 | MEDIUM | 6.5 | 0.3% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous co... |
| CVE-2026-12343 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message hea... |
| CVE-2026-12155 | MEDIUM | 6.5 | 0.3% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status ... |
| CVE-2026-12148 | HIGH | 8.8 | 0.3% | Oct 19, 2026 | IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code... |
| CVE-2026-11831 | MEDIUM | 5.4 | 0.2% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information ab... |
| CVE-2026-11829 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in... |
| CVE-2026-11828 | MEDIUM | 5.9 | 0.3% | Oct 19, 2026 | IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to c... |
| CVE-2026-112195 | MEDIUM | 4.7 | — | Oct 19, 2026 | A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/... |
| CVE-2026-112193 | LOW | 3.7 | 0.4% | Oct 19, 2026 | A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of the file plugins/webku... |
| CVE-2026-112190 | MEDIUM | 5.3 | — | Oct 19, 2026 | A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing ... |
| CVE-2026-112159 | MEDIUM | 5.5 | 0.9% | Oct 19, 2026 | A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of t... |
| CVE-2026-111862 | CRITICAL | 9.8 | 0.7% | Oct 19, 2026 | Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123 packages downloa... |
| CVE-2026-111750 | MEDIUM | 6.3 | 0.4% | Oct 19, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the pure Python parser ... |
| CVE-2026-111749 | LOW | 2.3 | 0.3% | Oct 19, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an e... |
| CVE-2026-111748 | MEDIUM | 6.3 | — | Oct 19, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an... |
| CVE-2026-111066 | HIGH | 8.2 | 0.4% | Oct 19, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart reque... |
| CVE-2026-111065 | MEDIUM | 6.9 | — | Oct 19, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can ... |
| CVE-2026-111064 | HIGH | 8.2 | 0.4% | Oct 19, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handl... |
| CVE-2026-111063 | MEDIUM | 6.3 | 0.2% | Oct 19, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute fo... |
| CVE-2026-111061 | MEDIUM | 4.3 | — | Oct 19, 2026 | russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the a... |
| CVE-2026-111059 | MEDIUM | 6.1 | 0.3% | Oct 19, 2026 | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.11,... |
| CVE-2026-10743 | HIGH | 8.8 | 0.3% | Oct 19, 2026 | IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation o... |