CVE Vulnerability Database
Search and browse 423,931 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110713 | MEDIUM | 6.5 | 0.5% | Oct 14, 2026 | libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_fs_volume_info and smb2_decode_... |
| CVE-2026-110712 | MEDIUM | 6.5 | 0.4% | Oct 14, 2026 | libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_all_info that allows malicious ... |
| CVE-2026-110661 | LOW | 3.3 | 0.2% | Oct 14, 2026 | CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFI_read_node_header that allows attackers to c... |
| CVE-2026-110660 | LOW | 3.3 | 0.2% | Oct 14, 2026 | vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221_lib.c,... |
| CVE-2026-110659 | MEDIUM | 5.5 | 0.2% | Oct 14, 2026 | ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocation_section_accessor get_entry() that all... |
| CVE-2026-110658 | MEDIUM | 5.3 | 0.7% | Oct 14, 2026 | Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg_multipart_parse() that allows unauthen... |
| CVE-2026-110657 | LOW | 3.3 | 0.2% | Oct 14, 2026 | Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows ... |
| CVE-2026-110656 | LOW | 3.1 | 0.3% | Oct 14, 2026 | miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's nam... |
| CVE-2026-110655 | LOW | 3.1 | 0.3% | Oct 14, 2026 | miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that ... |
| CVE-2026-110654 | MEDIUM | 6.1 | 0.2% | Oct 14, 2026 | libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to co... |
| CVE-2026-109438 | MEDIUM | 5.3 | 0.4% | Oct 14, 2026 | 3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerabilit... |
| CVE-2026-103929 | HIGH | 7.8 | 0.2% | Oct 14, 2026 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise l... |
| CVE-2026-102893 | CRITICAL | 9.1 | 0.4% | Oct 14, 2026 | Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, GenericOpenIdConnectBackend matc... |
| CVE-2026-102695 | HIGH | 8.2 | 0.3% | Oct 14, 2026 | OmniFaces is a utility library for Faces. In OmniFaces versions before 1.14.3, 2.7.33, 3.14.23, 4.7.12, and 5.4.2, Combi... |
| CVE-2026-101897 | MEDIUM | 5.1 | 0.4% | Oct 14, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-101896 | HIGH | 8.2 | 0.7% | Oct 14, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-100404 | MEDIUM | 6.5 | 0.4% | Oct 14, 2026 | Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, guest users can receive new mess... |
| CVE-2026-100394 | MEDIUM | 6.5 | 0.4% | Oct 14, 2026 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11,... |
| CVE-2026-100169 | HIGH | 7.6 | 0.9% | Oct 14, 2026 | Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows... |
| CVE-2026-97629 | MEDIUM | 6.5 | 0.2% | Oct 14, 2026 | Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an exp... |
| CVE-2026-97205 | HIGH | 8.1 | — | Oct 14, 2026 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AI... |
| CVE-2026-96615 | MEDIUM | 6.5 | 0.3% | Oct 14, 2026 | Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition (CR... |
| CVE-2026-95101 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 wi... |
| CVE-2026-94197 | HIGH | 7.5 | 0.4% | Oct 14, 2026 | An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when con... |
| CVE-2026-93479 | HIGH | 8.1 | — | Oct 14, 2026 | A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directi... |