CVE Vulnerability Database
Search and browse 384,771 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-65604 | HIGH | 8.8 | 0.3% | Jul 23, 2026 | Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent (OPA) d... |
| CVE-2026-63732 | CRITICAL | 9.9 | 0.7% | Jul 23, 2026 | 9router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default password (123456) that authent... |
| CVE-2026-63313 | HIGH | 8.3 | 0.3% | Jul 23, 2026 | 9Router before 0.4.72 contains a server-side request forgery (SSRF) vulnerability in the /v1/web/fetch endpoint. The end... |
| CVE-2026-16807 | HIGH | 8.8 | 0.3% | Jul 23, 2026 | Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform ... |
| CVE-2026-16806 | HIGH | 8.8 | 0.4% | Jul 23, 2026 | Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code in... |
| CVE-2026-16805 | HIGH | 8.8 | 0.3% | Jul 23, 2026 | Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code ins... |
| CVE-2026-16804 | HIGH | 8.3 | 0.3% | Jul 23, 2026 | Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the rende... |
| CVE-2026-16765 | HIGH | 7.3 | 0.3% | Jul 23, 2026 | A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality o... |
| CVE-2026-16764 | MEDIUM | 6.3 | 0.2% | Jul 23, 2026 | A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file do... |
| CVE-2026-16763 | MEDIUM | 5.3 | 0.7% | Jul 23, 2026 | A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown funct... |
| CVE-2025-71389 | CRITICAL | 10 | 0.9% | Jul 23, 2026 | Cal.com (calcom/cal.diy) before 5.9.9 is vulnerable to unauthenticated remote code execution because it bundles a versio... |
| CVE-2024-58355 | CRITICAL | 9.3 | 0.3% | Jul 23, 2026 | Cal.com (calcom/cal.diy) versions through 4.7.15 contain a stored cross-site scripting vulnerability. The single booking... |
| CVE-2024-58354 | CRITICAL | 9.9 | 0.4% | Jul 23, 2026 | cal.com (calcom repository, later renamed cal.diy) is affected by a repository takeover vulnerability in its GitHub Acti... |
| CVE-2024-58353 | CRITICAL | 9.3 | 0.3% | Jul 23, 2026 | Cal.com (repository calcom/cal.diy) in versions <= 4.7.15 is vulnerable to cross-site scripting (XSS) on the publicly ac... |
| CVE-2026-6924 | HIGH | 8.7 | 0.3% | Jul 23, 2026 | A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers g... |
| CVE-2026-52439 | CRITICAL | 9.8 | 0.5% | Jul 23, 2026 | An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the p... |
| CVE-2026-50103 | HIGH | 7.1 | 0.2% | Jul 23, 2026 | A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to cra... |
| CVE-2026-50039 | HIGH | 8.7 | 0.3% | Jul 23, 2026 | The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corru... |
| CVE-2026-50032 | HIGH | 8.7 | 0.3% | Jul 23, 2026 | A NULL pointer dereference in the MMS Write Named Variable List handler, which may allow a network adjacent attacker to ... |
| CVE-2026-49035 | CRITICAL | 9.2 | 0.4% | Jul 23, 2026 | The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execu... |
| CVE-2026-47724 | CRITICAL | 9.9 | 0.4% | Jul 23, 2026 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.4, the `/... |
| CVE-2026-47723 | HIGH | 7.1 | 0.3% | Jul 23, 2026 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.1, none o... |
| CVE-2026-39155 | MEDIUM | 6.5 | 0.1% | Jul 23, 2026 | Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where the next NSEC owner name ... |
| CVE-2026-38764 | HIGH | 7.8 | 0.2% | Jul 23, 2026 | An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kerne... |
| CVE-2026-34496 | HIGH | 7.1 | 0.2% | Jul 23, 2026 | Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before... |