CVE Vulnerability Database

Search and browse 423,806 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-110754MEDIUM6.5Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline. getline c...
CVE-2026-110753CRITICAL9.8Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_row...
CVE-2026-110752HIGH7.5Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 sele...
CVE-2026-107346——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-106549——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-96628MEDIUM4.3Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.11.0, AuthMiddleware.ma...
CVE-2026-96627HIGH8.8Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.6.0, UpdateUser in back...
CVE-2026-96626HIGH8.5Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0, UpdateRegistry and...
CVE-2026-68498HIGH7.5StreamReadConstraints.maxNameLength (default 50,000 characters) is intended to bound how much memory a single JSON Objec...
CVE-2026-62439HIGH7A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for im...
CVE-2026-62438MEDIUM6.1A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory conte...
CVE-2026-49410HIGH8.1OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 al...
CVE-2026-111044HIGH7.6Sunshine is a self-hosted game stream host for Moonlight. From 2026.329.165800 until 2026.906.222525, Sunshine accepted ...
CVE-2026-108372HIGH7.1Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering. From ...
CVE-2026-96542MEDIUM5Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371, 1...
CVE-2026-64862MEDIUM6.5Frappe HR is an open-source human resources management solution (HRMS). Prior to 15.58.3 and 16.4.3, HRMS PWA API endpoi...
CVE-2026-55796MEDIUM6.5Frappe HR is an open-source human resources management solution (HRMS). Prior to 15.60.3 and 16.7.1, the Salary Payments...
CVE-2026-108374HIGH7.7ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.121.0 and 16.34.0, certain endpoints fo...
CVE-2026-108373MEDIUM6.5ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.118.0 and 16.27.0, certain endpoints in...
CVE-2026-96620CRITICAL9.2Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a s...
CVE-2026-69080HIGH7.5Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: f...
CVE-2026-69077HIGH7.5Exposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin. Impact most to the kylin services...
CVE-2026-69076HIGH7.5Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that a...
CVE-2026-68573CRITICAL9.8Improper Authentication vulnerability in Apache Kylin. Unauthenticated user may access to system cleanup actions. Impact...
CVE-2026-68572HIGH7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache K...