CVE Vulnerability Database
Search and browse 423,865 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111373 | HIGH | 7.5 | 0.2% | Oct 16, 2026 | FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicio... |
| CVE-2026-111237 | MEDIUM | 5.3 | 0.1% | Oct 16, 2026 | A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the f... |
| CVE-2026-111212 | MEDIUM | 4.8 | 0.1% | Oct 16, 2026 | A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the f... |
| CVE-2026-109813 | HIGH | 8.6 | 0.2% | Oct 16, 2026 | A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing prod... |
| CVE-2026-109812 | MEDIUM | 6.9 | 0.1% | Oct 16, 2026 | A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computi... |
| CVE-2026-105228 | HIGH | 7 | 0.3% | Oct 16, 2026 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft. |
| CVE-2026-105227 | HIGH | 7 | 0.3% | Oct 16, 2026 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft. |
| CVE-2026-100159 | MEDIUM | 4.8 | 0.3% | Oct 16, 2026 | The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4.1 to 6.4.2. This is du... |
| CVE-2026-92777 | MEDIUM | 6.4 | 0.2% | Oct 16, 2026 | A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocke... |
| CVE-2026-92629 | HIGH | 7.3 | 0.1% | Oct 16, 2026 | A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in th... |
| CVE-2026-89062 | MEDIUM | 5.5 | 0.1% | Oct 16, 2026 | A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a loc... |
| CVE-2026-89057 | MEDIUM | 6.8 | 0.3% | Oct 16, 2026 | A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physica... |
| CVE-2026-84823 | HIGH | 7.1 | 0.4% | Oct 16, 2026 | A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBA... |
| CVE-2026-75941 | HIGH | 8 | 0.3% | Oct 16, 2026 | A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese mar... |
| CVE-2026-16755 | MEDIUM | 5.3 | 0.2% | Oct 16, 2026 | A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that c... |
| CVE-2026-16754 | MEDIUM | 4.8 | 0.1% | Oct 16, 2026 | A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusive... |
| CVE-2026-111210 | HIGH | 7.3 | 0.3% | Oct 16, 2026 | A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection of the file PaymentSe... |
| CVE-2026-8311 | — | — | — | Oct 15, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-5819 | — | — | — | Oct 15, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-2937 | — | — | — | Oct 15, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-107316 | — | — | — | Oct 15, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-107172 | — | — | — | Oct 15, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2025-3778 | — | — | — | Oct 15, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-96806 | MEDIUM | 5.8 | 0.2% | Oct 15, 2026 | The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token... |
| CVE-2026-94135 | MEDIUM | 4.3 | 0.2% | Oct 15, 2026 | The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, `SFTPClientPool`) disable SSH ... |