CVE Vulnerability Database
Search and browse 383,942 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-56538 | LOW | 3.5 | 0.2% | Jul 27, 2026 | An endpoint in HCL Connections is vulnerable to information disclosure. In certain scenarios this might lead to disclosi... |
| CVE-2026-56537 | LOW | 3.5 | 0.2% | Jul 27, 2026 | HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they ar... |
| CVE-2026-17512 | LOW | 3.3 | — | Jul 27, 2026 | A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function log_mel_spectrogram of the fi... |
| CVE-2026-12991 | HIGH | 8.7 | — | Jul 27, 2026 | The lack of cryptographic mechanisms to ensure the integrity and authenticity of communications in Ghost Robotics' Visio... |
| CVE-2026-12990 | HIGH | 7.7 | — | Jul 27, 2026 | An access control vulnerability in the mobile app (APK v5.5.0) for Ghost Robotics' Vision 60 robot allows multiple simul... |
| CVE-2026-12989 | HIGH | 8.7 | — | Jul 27, 2026 | A lack of authentication in the mobile app (APK v5.5.0) for Ghost Robotics' Vision 60 robot allows an unauthenticated at... |
| CVE-2026-66053 | MEDIUM | 5.9 | — | Jul 27, 2026 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affect... |
| CVE-2026-58662 | CRITICAL | 9.1 | — | Jul 27, 2026 | Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. Thi... |
| CVE-2026-58389 | HIGH | 7.5 | — | Jul 27, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings. This issue affects A... |
| CVE-2026-58023 | CRITICAL | 9.1 | — | Jul 27, 2026 | Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Us... |
| CVE-2026-57917 | MEDIUM | 4.8 | 0.1% | Jul 27, 2026 | proCertum SmartSign parses external XML entities from arbitrary crafted signature files, enabling SSRF and potentially a... |
| CVE-2026-57916 | MEDIUM | 4.6 | 0.1% | Jul 27, 2026 | proCertum SmartSign opens Certificate Practice Statement (CPS) URI without schema validation. An attacker can prepare ar... |
| CVE-2026-55971 | CRITICAL | 9.8 | — | Jul 27, 2026 | Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0... |
| CVE-2026-55970 | MEDIUM | 6.5 | — | Jul 27, 2026 | Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users a... |
| CVE-2026-55969 | HIGH | 7.5 | — | Jul 27, 2026 | Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings. This i... |
| CVE-2026-55968 | HIGH | 7.5 | — | Jul 27, 2026 | Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift ... |
| CVE-2026-49158 | HIGH | 7.5 | — | Jul 27, 2026 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Ruby bindings. This iss... |
| CVE-2026-48586 | HIGH | 7.5 | — | Jul 27, 2026 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D... |
| CVE-2026-48145 | HIGH | 7.5 | — | Jul 27, 2026 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings. This issue affects A... |
| CVE-2026-48144 | CRITICAL | 9.1 | — | Jul 27, 2026 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings. This issue affect... |
| CVE-2026-45112 | HIGH | 7.5 | — | Jul 27, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects A... |
| CVE-2026-43871 | HIGH | 7.5 | — | Jul 27, 2026 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings.... |
| CVE-2026-41608 | HIGH | 7.5 | 1.1% | Jul 27, 2026 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings. This i... |
| CVE-2026-14856 | MEDIUM | 6.3 | — | Jul 27, 2026 | A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter ... |
| CVE-2026-12495 | MEDIUM | 5.3 | — | Jul 27, 2026 | Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys M... |