CVE Vulnerability Database
Search and browse 423,895 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-58390 | HIGH | 8 | 0.5% | Oct 15, 2026 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN connection-status dashb... |
| CVE-2026-57155 | CRITICAL | 9.9 | — | Oct 15, 2026 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's... |
| CVE-2026-53582 | HIGH | 7.1 | 0.7% | Oct 15, 2026 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.10, the Trust module stores attacker-co... |
| CVE-2026-52167 | MEDIUM | 6.2 | 0.2% | Oct 15, 2026 | A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service ... |
| CVE-2026-45452 | HIGH | 8.3 | 0.3% | Oct 15, 2026 | Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue af... |
| CVE-2026-45451 | HIGH | 8.3 | 0.3% | Oct 15, 2026 | : Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics ... |
| CVE-2026-45450 | HIGH | 8.3 | 0.3% | Oct 15, 2026 | : Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStre... |
| CVE-2026-45449 | HIGH | 8.3 | 0.8% | Oct 15, 2026 | : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics... |
| CVE-2026-111096 | MEDIUM | 5.4 | 0.2% | Oct 15, 2026 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible |
| CVE-2026-111095 | MEDIUM | 5.4 | 0.2% | Oct 15, 2026 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible |
| CVE-2026-111094 | CRITICAL | 9.8 | 0.4% | Oct 15, 2026 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build mes... |
| CVE-2026-111093 | HIGH | 7.5 | — | Oct 15, 2026 | In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitr... |
| CVE-2026-111092 | MEDIUM | 6.5 | — | Oct 15, 2026 | In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to e... |
| CVE-2026-111091 | HIGH | 7.8 | — | Oct 15, 2026 | In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration |
| CVE-2026-110958 | CRITICAL | 10 | — | Oct 15, 2026 | A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file ... |
| CVE-2026-109449 | HIGH | 8.7 | 0.5% | Oct 15, 2026 | In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage... |
| CVE-2026-105474 | CRITICAL | 9.4 | 0.5% | Oct 15, 2026 | A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to... |
| CVE-2026-100352 | HIGH | 7.5 | 0.4% | Oct 15, 2026 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.148.0, the OpenAPI 3.1 validation path passes YAML Na... |
| CVE-2026-100351 | HIGH | 7.4 | — | Oct 15, 2026 | kin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.ValidationHandler val... |
| CVE-2026-100350 | MEDIUM | 5.3 | — | Oct 15, 2026 | kin-openapi is a Go project for handling OpenAPI files. From 0.145.0 until 0.146.0, openapi3filter repeatedly calls rege... |
| CVE-2026-100349 | HIGH | 8.2 | 0.4% | Oct 15, 2026 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.146.0, openapi3filter.ValidateResponse passes a nil r... |
| CVE-2026-100348 | MEDIUM | 5.3 | — | Oct 15, 2026 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3.Loader can dereference a nil SchemaRe... |
| CVE-2026-100347 | MEDIUM | 5.3 | — | Oct 15, 2026 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3filter.ValidationHandler uses the rout... |
| CVE-2026-9703 | HIGH | 7.1 | 0.2% | Oct 15, 2026 | Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources. A ... |
| CVE-2026-95180 | MEDIUM | 5.5 | 0.1% | Oct 15, 2026 | An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information an... |