CVE Vulnerability Database

Search and browse 423,806 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-92263HIGH7.2SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, the api/admin/backup...
CVE-2026-77630HIGH7.5pupnp is an SDK for development of UPnP device and control point applications. Prior to 22.0.4, parse_hostport in upnp/s...
CVE-2026-68908MEDIUM5.3libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Valu...
CVE-2026-68907HIGH8.2libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Valu...
CVE-2026-68906HIGH8.7libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Valu...
CVE-2026-57488HIGH7.1pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/ge...
CVE-2026-57487HIGH7.5pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, Transfer-Encoding: chunke...
CVE-2026-57486HIGH7.5pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNode_compare in ixml/...
CVE-2026-57447MEDIUM4.3Discourse Doc Categories is a plugin for organizing Discourse topics as documentation. Prior to the verified source fix,...
CVE-2026-57446MEDIUM5.3libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Valu...
CVE-2026-55862MEDIUM6.5pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multiple ixml DOM travers...
CVE-2026-55836MEDIUM6.8Open Zaak is an open-source data and services layer for Dutch case-oriented working. From 1.13.0 until 1.27.2, 1.28.2, a...
CVE-2026-55543HIGH8.5TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soundbank.path...
CVE-2026-54657MEDIUM6.5Open Zaak is an open-source data and services layer for Dutch case-oriented working. From 1.0.0 until 1.27.2, 1.28.2, an...
CVE-2026-48741HIGH7.5libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Valu...
CVE-2026-48503HIGH7.5libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Valu...
CVE-2026-46472HIGH7.5An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtde...
CVE-2026-46471MEDIUM5.5An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtde...
CVE-2026-44977CRITICAL9countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, plugins...
CVE-2026-42270HIGH7.5countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, star-ra...
CVE-2026-42269HIGH8.1countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, the aut...
CVE-2026-41582HIGH7.5countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, public ...
CVE-2026-26846CRITICAL9.8Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbit...
CVE-2026-111581LOW3.3A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pass caller-supplied la...
CVE-2026-102941HIGH7.5The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0...