CVE Vulnerability Database
Search and browse 423,461 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-112278 | MEDIUM | 6.5 | 0.3% | Oct 19, 2026 | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_raw_bmpcache() in orders.c that allow... |
| CVE-2026-112277 | MEDIUM | 6.5 | — | Oct 19, 2026 | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_plane() in bitmap.c that allows malic... |
| CVE-2026-112276 | MEDIUM | 6.1 | — | Oct 19, 2026 | Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap... |
| CVE-2026-112275 | MEDIUM | 6.1 | — | Oct 19, 2026 | Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length dec... |
| CVE-2026-112274 | LOW | 3.7 | — | Oct 19, 2026 | libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa_record::init that allows remote attackers t... |
| CVE-2026-112273 | MEDIUM | 5.3 | 0.5% | Oct 19, 2026 | libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns.cpp that allows rem... |
| CVE-2026-112272 | MEDIUM | 5.5 | — | Oct 19, 2026 | Libdisplay-info 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v2 section parser in displayid2.... |
| CVE-2026-112271 | MEDIUM | 5.5 | — | Oct 19, 2026 | libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in dis... |
| CVE-2026-112270 | MEDIUM | 6.5 | — | Oct 19, 2026 | SGLang through 0.5.22 with the Mooncake disaggregation backend contains an uncontrolled memory allocation vulnerability ... |
| CVE-2026-112269 | MEDIUM | 6.5 | — | Oct 19, 2026 | SGLang through 0.5.22 with the Mooncake disaggregation backend accepts unauthenticated decode registration messages on t... |
| CVE-2026-112268 | MEDIUM | 6.3 | 0.3% | Oct 19, 2026 | sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerability that allows holders of th... |
| CVE-2026-112267 | MEDIUM | 6.5 | — | Oct 19, 2026 | SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that al... |
| CVE-2026-112266 | MEDIUM | 5.9 | — | Oct 19, 2026 | SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight... |
| CVE-2026-112265 | MEDIUM | 6.5 | — | Oct 19, 2026 | LangBot through 4.11.0 contains a missing authenticity verification vulnerability that allows unauthenticated attackers ... |
| CVE-2026-112264 | HIGH | 7.8 | — | Oct 19, 2026 | BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attackers to add arbitrary ... |
| CVE-2026-112263 | HIGH | 7.8 | 0.7% | Oct 19, 2026 | Television (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell ... |
| CVE-2026-112262 | HIGH | 7.1 | — | Oct 19, 2026 | RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and ... |
| CVE-2026-112222 | MEDIUM | 5.4 | — | Oct 19, 2026 | Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control S... |
| CVE-2026-112146 | HIGH | 7.4 | — | Oct 19, 2026 | A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /et... |
| CVE-2026-112145 | HIGH | 7.3 | 0.4% | Oct 19, 2026 | A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerability affects the func... |
| CVE-2026-112144 | MEDIUM | 5.3 | — | Oct 19, 2026 | A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. T... |
| CVE-2026-112143 | HIGH | 7.3 | — | Oct 19, 2026 | A security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f42538... |
| CVE-2026-111939 | MEDIUM | 4.6 | — | Oct 19, 2026 | Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticated portal users to c... |
| CVE-2026-111938 | MEDIUM | 4.3 | — | Oct 19, 2026 | Frappe CRM before 1.74.0 contains a missing authorization vulnerability that allows authenticated Sales Users to modify ... |
| CVE-2026-111937 | MEDIUM | 5.4 | — | Oct 19, 2026 | Frappe CRM before 1.81.2 contains a missing authorization vulnerability that allows authenticated Sales Users to access ... |