CVE Vulnerability Database
Search and browse 423,902 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-34015 | MEDIUM | 6.5 | 0.5% | Oct 15, 2026 | A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, the... |
| CVE-2026-34014 | HIGH | 8.4 | 0.1% | Oct 15, 2026 | An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If ... |
| CVE-2026-34009 | HIGH | 8.4 | 0.1% | Oct 15, 2026 | An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local atta... |
| CVE-2026-34008 | HIGH | 8.5 | 0.1% | Oct 15, 2026 | An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If a... |
| CVE-2026-34007 | MEDIUM | 6.9 | 1.6% | Oct 15, 2026 | An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could... |
| CVE-2026-34006 | CRITICAL | 9.3 | 0.5% | Oct 15, 2026 | A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE. If exploited,... |
| CVE-2026-26245 | HIGH | 8.8 | 0.4% | Oct 15, 2026 | A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they... |
| CVE-2026-26244 | HIGH | 8.8 | 0.4% | Oct 15, 2026 | A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they... |
| CVE-2026-26243 | HIGH | 7.2 | 0.5% | Oct 15, 2026 | A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the... |
| CVE-2026-19864 | MEDIUM | 5.6 | 0.1% | Oct 15, 2026 | Eclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object. When the credential... |
| CVE-2026-19863 | CRITICAL | 9.3 | 0.5% | Oct 15, 2026 | An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path co... |
| CVE-2026-18662 | MEDIUM | 6.9 | 0.4% | Oct 15, 2026 | In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraint... |
| CVE-2026-18660 | HIGH | 8.8 | 0.4% | Oct 15, 2026 | In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sen... |
| CVE-2026-18659 | MEDIUM | 6.9 | 0.4% | Oct 15, 2026 | In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-eeN-servlet`, the Ja... |
| CVE-2026-96614 | MEDIUM | 5.1 | 0.2% | Oct 15, 2026 | "ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attac... |
| CVE-2026-79823 | MEDIUM | 4 | 0.1% | Oct 15, 2026 | HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior. |
| CVE-2026-77711 | HIGH | 8.2 | 0.3% | Oct 15, 2026 | When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Aut... |
| CVE-2026-76184 | HIGH | 8.2 | 0.3% | Oct 15, 2026 | In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is a... |
| CVE-2026-76182 | MEDIUM | 6.9 | 0.3% | Oct 15, 2026 | In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as ... |
| CVE-2026-75559 | MEDIUM | 6.9 | 0.2% | Oct 15, 2026 | The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive informati... |
| CVE-2026-72528 | MEDIUM | 5.1 | 0.2% | Oct 15, 2026 | "Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a sp... |
| CVE-2026-63315 | HIGH | 8.2 | 0.3% | Oct 15, 2026 | WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with ac... |
| CVE-2026-63314 | HIGH | 8.7 | 0.2% | Oct 15, 2026 | WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Impr... |
| CVE-2026-35088 | HIGH | 8.2 | 0.1% | Oct 15, 2026 | Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary... |
| CVE-2026-18661 | HIGH | 8.8 | 0.3% | Oct 15, 2026 | In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authorit... |