CVE Vulnerability Database
Search and browse 423,945 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110605 | MEDIUM | 5.5 | 0.2% | Oct 14, 2026 | libschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to crash applications by supplyi... |
| CVE-2026-110604 | LOW | 3.6 | — | Oct 14, 2026 | Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml_strtod() when the locale decimal p... |
| CVE-2026-110603 | MEDIUM | 6.3 | 0.2% | Oct 14, 2026 | LASzip through 3.5.0 contains an invalid free vulnerability in laszip_read_header() that allows attackers to free uninit... |
| CVE-2026-110602 | MEDIUM | 6.3 | 0.2% | Oct 14, 2026 | libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that ... |
| CVE-2026-110601 | MEDIUM | 6.3 | 0.2% | Oct 14, 2026 | libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 contains a heap out-of-bounds write vulnerability in gif_init_frame() ... |
| CVE-2026-110600 | MEDIUM | 5.5 | 0.2% | Oct 14, 2026 | xlsxio through 0.2.37 contains a NULL pointer dereference vulnerability in main_sheet_get_sheetfile_expat_callback_eleme... |
| CVE-2026-110599 | HIGH | 7.1 | 0.2% | Oct 14, 2026 | L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary()... |
| CVE-2026-110598 | MEDIUM | 6.1 | 0.2% | Oct 14, 2026 | Libyal libpff through 20260926 contains an integer underflow in libpff_record_entry_get_multi_value() that allows attack... |
| CVE-2026-110597 | MEDIUM | 6.1 | 0.3% | Oct 14, 2026 | Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory() that allow... |
| CVE-2026-110596 | MEDIUM | 5.5 | 0.2% | Oct 14, 2026 | quirc through 1.2 contains an excessive-iteration vulnerability in find_alignment_pattern() in lib/identify.c that allow... |
| CVE-2026-110595 | MEDIUM | 4.3 | 0.5% | Oct 14, 2026 | BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in _read_upload() that reads enti... |
| CVE-2026-110594 | MEDIUM | 4.9 | 0.6% | Oct 14, 2026 | BottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that allows authenticated or... |
| CVE-2026-110593 | MEDIUM | 5.4 | 0.4% | Oct 14, 2026 | BottleCRM through 1.14.5 contains a server-side template injection vulnerability in the send_email Celery task, which co... |
| CVE-2026-110592 | LOW | 3.5 | 0.4% | Oct 14, 2026 | BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability in render_invoice_template() that allows authenti... |
| CVE-2026-110591 | MEDIUM | 5.5 | 0.2% | Oct 14, 2026 | OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analyze() that allows att... |
| CVE-2026-110270 | MEDIUM | 5.5 | 0.2% | Oct 14, 2026 | OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons JSRInlinerAdapter th... |
| CVE-2026-110263 | MEDIUM | 5.5 | — | Oct 14, 2026 | OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows atta... |
| CVE-2026-110262 | LOW | 3.3 | — | Oct 14, 2026 | OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allo... |
| CVE-2026-110261 | MEDIUM | 5.5 | — | Oct 14, 2026 | OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying cra... |
| CVE-2026-110260 | MEDIUM | 5.5 | 0.2% | Oct 14, 2026 | OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.computeMaxStackAndLocal() a... |
| CVE-2026-110259 | MEDIUM | 5.5 | 0.2% | Oct 14, 2026 | OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions() that al... |
| CVE-2026-110258 | MEDIUM | 5.5 | — | Oct 14, 2026 | OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors() that... |
| CVE-2026-110257 | MEDIUM | 5.5 | — | Oct 14, 2026 | OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMethodsAttribu... |
| CVE-2026-107381 | MEDIUM | 6.5 | 0.4% | Oct 14, 2026 | svg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, Resolver::processReferences() in src/ElementReference/Resolver... |
| CVE-2026-104939 | HIGH | 7.5 | 0.4% | Oct 14, 2026 | Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ing... |