CVE Vulnerability Database
Search and browse 423,492 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-112284 | LOW | 3.3 | — | Oct 19, 2026 | libaribcaption 1.1.0 through 1.1.2 contains a global out-of-bounds read in DecoderImpl::HandleGLGR() that reads past the... |
| CVE-2026-112283 | MEDIUM | 5.5 | 0.1% | Oct 19, 2026 | VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in _parse_extent_start_points(... |
| CVE-2026-112282 | MEDIUM | 5.5 | — | Oct 19, 2026 | VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi_access_point() that allows attacke... |
| CVE-2026-112281 | MEDIUM | 6.1 | — | Oct 19, 2026 | libaribb24 (aribb24) through 1.0.3 contains a stack-based buffer overflow vulnerability in decoder_handle_csi() in src/d... |
| CVE-2026-112280 | MEDIUM | 6.1 | — | Oct 19, 2026 | libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overflow vulnerability in src/parser.c that allows attac... |
| CVE-2026-112279 | MEDIUM | 6.5 | — | Oct 19, 2026 | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_bmpcache2() in orders.c that allows m... |
| CVE-2026-112278 | MEDIUM | 6.5 | 0.3% | Oct 19, 2026 | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_raw_bmpcache() in orders.c that allow... |
| CVE-2026-112277 | MEDIUM | 6.5 | — | Oct 19, 2026 | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_plane() in bitmap.c that allows malic... |
| CVE-2026-112276 | MEDIUM | 6.1 | — | Oct 19, 2026 | Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap... |
| CVE-2026-112275 | MEDIUM | 6.1 | — | Oct 19, 2026 | Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length dec... |
| CVE-2026-112274 | LOW | 3.7 | — | Oct 19, 2026 | libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa_record::init that allows remote attackers t... |
| CVE-2026-112273 | MEDIUM | 5.3 | 0.5% | Oct 19, 2026 | libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns.cpp that allows rem... |
| CVE-2026-112272 | MEDIUM | 5.5 | — | Oct 19, 2026 | Libdisplay-info 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v2 section parser in displayid2.... |
| CVE-2026-112271 | MEDIUM | 5.5 | — | Oct 19, 2026 | libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in dis... |
| CVE-2026-112270 | MEDIUM | 6.5 | — | Oct 19, 2026 | SGLang through 0.5.22 with the Mooncake disaggregation backend contains an uncontrolled memory allocation vulnerability ... |
| CVE-2026-112269 | MEDIUM | 6.5 | — | Oct 19, 2026 | SGLang through 0.5.22 with the Mooncake disaggregation backend accepts unauthenticated decode registration messages on t... |
| CVE-2026-112268 | MEDIUM | 6.3 | 0.3% | Oct 19, 2026 | sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerability that allows holders of th... |
| CVE-2026-112267 | MEDIUM | 6.5 | — | Oct 19, 2026 | SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that al... |
| CVE-2026-112266 | MEDIUM | 5.9 | — | Oct 19, 2026 | SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight... |
| CVE-2026-112265 | MEDIUM | 6.5 | — | Oct 19, 2026 | LangBot through 4.11.0 contains a missing authenticity verification vulnerability that allows unauthenticated attackers ... |
| CVE-2026-112264 | HIGH | 7.8 | — | Oct 19, 2026 | BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attackers to add arbitrary ... |
| CVE-2026-112263 | HIGH | 7.8 | 0.7% | Oct 19, 2026 | Television (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell ... |
| CVE-2026-112262 | HIGH | 7.1 | — | Oct 19, 2026 | RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and ... |
| CVE-2026-112222 | MEDIUM | 5.4 | — | Oct 19, 2026 | Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control S... |
| CVE-2026-112146 | HIGH | 7.4 | — | Oct 19, 2026 | A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /et... |