CVE Vulnerability Database
Search and browse 423,945 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-59766 | MEDIUM | 4.3 | — | Oct 14, 2026 | Gitea's starred-repository and tracked-time API endpoints do not re-check current repository permissions before returnin... |
| CVE-2026-53613 | HIGH | 7 | 0.1% | Oct 14, 2026 | util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in ... |
| CVE-2026-53612 | HIGH | 7 | 0.1% | Oct 14, 2026 | util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUI... |
| CVE-2026-25946 | MEDIUM | 5.3 | — | Oct 14, 2026 | When OpenID sign-in is enabled, Gitea accepts a user-supplied OpenID URL and performs discovery requests without validat... |
| CVE-2026-15176 | HIGH | 8.1 | — | Oct 14, 2026 | A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive t... |
| CVE-2026-110650 | CRITICAL | 9.8 | 3.0% | Oct 14, 2026 | The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generate_thumbnail() that all... |
| CVE-2026-110649 | CRITICAL | 9.8 | 2.5% | Oct 14, 2026 | Stills before 25.24.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by ... |
| CVE-2026-110648 | HIGH | 7.8 | 1.1% | Oct 14, 2026 | @offactory/compress-fonts before 1.1.1 contains an OS command injection vulnerability that allows attackers to execute s... |
| CVE-2026-110647 | HIGH | 7.8 | 1.0% | Oct 14, 2026 | Turnpress through 0.4.2 contains an OS command injection vulnerability that allows attackers to execute shell commands b... |
| CVE-2026-110646 | HIGH | 8.1 | 2.1% | Oct 14, 2026 | Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attacke... |
| CVE-2026-110645 | CRITICAL | 9.8 | 3.2% | Oct 14, 2026 | Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute command... |
| CVE-2026-110644 | CRITICAL | 9.8 | 2.7% | Oct 14, 2026 | nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType() that allows attackers ... |
| CVE-2026-110643 | CRITICAL | 9.8 | 2.6% | Oct 14, 2026 | transcribe2texts through 1.0.6 contains an OS command injection vulnerability that allows attackers to execute commands ... |
| CVE-2026-110642 | HIGH | 7.8 | 1.1% | Oct 14, 2026 | xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer() that allows attackers to ex... |
| CVE-2026-110641 | HIGH | 8.8 | 2.5% | Oct 14, 2026 | @runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allows attackers to exec... |
| CVE-2026-110640 | CRITICAL | 9.8 | 2.7% | Oct 14, 2026 | Whisper-node through 1.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by s... |
| CVE-2026-110639 | CRITICAL | 9.8 | 2.7% | Oct 14, 2026 | @mborne/extract before 0.2.1 contains an OS command injection vulnerability that allows attackers to execute commands by... |
| CVE-2026-110638 | CRITICAL | 9.8 | 2.7% | Oct 14, 2026 | doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supp... |
| CVE-2026-110637 | HIGH | 7.8 | 1.1% | Oct 14, 2026 | buildebooks before 0.2.2 contains an OS command injection vulnerability in lib/kindle.js that allows attackers to execut... |
| CVE-2026-110636 | CRITICAL | 9.8 | 2.3% | Oct 14, 2026 | pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_uti... |
| CVE-2026-110635 | CRITICAL | 9.8 | 2.5% | Oct 14, 2026 | webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers that run libw... |
| CVE-2026-110634 | CRITICAL | 9.8 | 2.3% | Oct 14, 2026 | git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by ... |
| CVE-2026-110633 | HIGH | 7.8 | 0.1% | Oct 14, 2026 | MyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-privileged users to m... |
| CVE-2026-110632 | HIGH | 8.1 | 0.6% | Oct 14, 2026 | Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote at... |
| CVE-2026-110631 | CRITICAL | 9.8 | 0.7% | Oct 14, 2026 | Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated ... |