CVE Vulnerability Database
Search and browse 423,931 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-89071 | HIGH | 8.8 | 0.4% | Oct 14, 2026 | Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Tr... |
| CVE-2026-89070 | HIGH | 7.5 | 0.4% | Oct 14, 2026 | Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOV... |
| CVE-2026-89069 | MEDIUM | 5.4 | 0.4% | Oct 14, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Tr... |
| CVE-2026-89068 | CRITICAL | 9.8 | 0.5% | Oct 14, 2026 | Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOV... |
| CVE-2026-89067 | HIGH | 8.8 | 0.6% | Oct 14, 2026 | Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects ... |
| CVE-2026-87093 | HIGH | 8.8 | 0.1% | Oct 14, 2026 | Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOV... |
| CVE-2026-86561 | MEDIUM | 6.5 | 0.2% | Oct 14, 2026 | A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup... |
| CVE-2026-86002 | CRITICAL | 9 | 0.6% | Oct 14, 2026 | Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access an... |
| CVE-2026-77572 | LOW | 3.3 | 0.1% | Oct 14, 2026 | VeraCrypt provides disk encryption with strong security based on TrueCrypt. In 1.26.29 and earlier, selected metadata IO... |
| CVE-2026-76113 | MEDIUM | 4.3 | 0.2% | Oct 14, 2026 | Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an U... |
| CVE-2026-67416 | MEDIUM | 5.3 | 0.5% | Oct 14, 2026 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, the optimized AMQP 1.0... |
| CVE-2026-67414 | MEDIUM | 6 | 0.5% | Oct 14, 2026 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, deps/amqp10_common/src... |
| CVE-2026-62858 | MEDIUM | 5.3 | 0.5% | Oct 14, 2026 | YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourls_get_request() extracted the ... |
| CVE-2026-53615 | HIGH | 8 | 0.2% | Oct 14, 2026 | util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/... |
| CVE-2026-53614 | HIGH | 7 | 0.1% | Oct 14, 2026 | util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the S... |
| CVE-2026-49206 | LOW | 2.9 | 0.2% | Oct 14, 2026 | rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnName... |
| CVE-2026-110736 | LOW | 3.6 | 0.1% | Oct 14, 2026 | Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translat... |
| CVE-2026-110735 | LOW | 2.5 | 0.1% | Oct 14, 2026 | Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader (core/io/resource_format_binary.... |
| CVE-2026-110734 | LOW | 2.5 | 0.1% | Oct 14, 2026 | Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_lo... |
| CVE-2026-110719 | HIGH | 7.2 | 0.4% | Oct 14, 2026 | Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticate... |
| CVE-2026-110718 | MEDIUM | 5.9 | 0.4% | Oct 14, 2026 | TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplyi... |
| CVE-2026-110717 | MEDIUM | 5.3 | 0.5% | Oct 14, 2026 | Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthen... |
| CVE-2026-110716 | MEDIUM | 5.5 | 0.2% | Oct 14, 2026 | unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshield_get_file_table() that allows attacke... |
| CVE-2026-110715 | MEDIUM | 6.1 | 0.2% | Oct 14, 2026 | MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows a... |
| CVE-2026-110714 | MEDIUM | 6.5 | 0.5% | Oct 14, 2026 | libsmb2 through 6.2 contains an integer underflow vulnerability in decode_acl that allows malicious SMB servers to trigg... |