CVE Vulnerability Database

Search and browse 420,032 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-54380MEDIUM5.4VitaFit cloud API before 2026-10-30 contained a stored cross-site scripting vulnerability that allows authenticated atta...
CVE-2026-54379——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-54378CRITICAL9.6VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows any authenticated user t...
CVE-2026-54377MEDIUM6.5VitaFit cloud API before 2026-10-30 contained an insecure direct object reference vulnerability that allows authenticate...
CVE-2026-54376HIGH8.2VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom URI scheme vulnerability that al...
CVE-2026-54375HIGH8.4VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session management vulnerability that a...
CVE-2026-54374HIGH7.5VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentials vulnerability that allows a...
CVE-2026-54373LOW3.5VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnerability that allows netwo...
CVE-2026-54372HIGH8.8VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure TLS/SSL certificate validation vulnerab...
CVE-2026-122266HIGH8.7Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC ...
CVE-2026-122020MEDIUM4.3A security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.1. The affected element is the function stopAl...
CVE-2026-122019HIGH7.3A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v...
CVE-2026-122016MEDIUM6.3A vulnerability was determined in yangzongzhuan RuoYi-Vue up to 3.9.2. This issue affects the function SysPermissionServ...
CVE-2026-122015MEDIUM6.3A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function get_mlx_response ...
CVE-2026-121751LOW3.1Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.39....
CVE-2026-121750LOW3.1Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.40....
CVE-2026-121749LOW3.3Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.5.0...
CVE-2026-121748LOW3.6Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.27....
CVE-2026-121747MEDIUM5.5Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.2.0...
CVE-2026-121746MEDIUM5.5Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.40....
CVE-2026-121745LOW2.5Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.40....
CVE-2026-115473MEDIUM6.5Mongoose is an embedded web server and network library. Prior to 7.22, mg_path_is_sane in src/util.c read path.buf[1] wi...
CVE-2026-103002HIGH8.8GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 2.2.0 until 2.2....
CVE-2026-102895CRITICAL9.8GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_c...
CVE-2026-102894CRITICAL9.1GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 0.7.1 until 2.2....