CVE Vulnerability Database
Search and browse 386,279 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-46582 | LOW | 3.7 | 0.2% | Jul 22, 2026 | In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be ... |
| CVE-2026-44690 | HIGH | 7.5 | 0.2% | Jul 22, 2026 | In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with ... |
| CVE-2026-44687 | LOW | 3.7 | 0.2% | Jul 22, 2026 | In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forward zones where the name is below an intermediate l... |
| CVE-2026-44621 | MEDIUM | 5.9 | 0.3% | Jul 22, 2026 | With NLnet Labs Unbound up to and including version 1.25.1, applications using libunbound and configured with 'unwanted-... |
| CVE-2026-42955 | LOW | 3.7 | 0.2% | Jul 22, 2026 | In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost do... |
| CVE-2026-41637 | LOW | 3.7 | 0.2% | Jul 22, 2026 | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC (DoQ) queries are not accounted... |
| CVE-2026-40691 | HIGH | 7.5 | 0.3% | Jul 22, 2026 | In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the r... |
| CVE-2026-32665 | HIGH | 7.5 | 0.3% | Jul 22, 2026 | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC (DoQ) is enabled, the first two b... |
| CVE-2026-16560 | MEDIUM | 5.3 | — | Jul 22, 2026 | A heap-buffer-overflow flaw was found in Directory Server (389-ds-base). When a DN contains a legacy-quoted value, the s... |
| CVE-2026-16232 | CRITICAL | 9.8 | 71.4% | Jul 22, 2026 | An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote at... |
| CVE-2026-14932 | MEDIUM | 6.5 | 0.2% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vuln... |
| CVE-2026-14865 | MEDIUM | 5.3 | 0.2% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes client-state XML wi... |
| CVE-2026-14586 | MEDIUM | 5.9 | — | Jul 22, 2026 | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, in DNS-over-QUIC environments, with high concurrency and under ... |
| CVE-2026-13192 | MEDIUM | 6.5 | 0.2% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PD... |
| CVE-2026-13190 | HIGH | 8.1 | 0.5% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence utilities all... |
| CVE-2026-13189 | HIGH | 7.5 | 0.3% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of the language parameter in the spell c... |
| CVE-2026-13188 | MEDIUM | 5.9 | 0.1% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler request parameters may be tampered with, potential... |
| CVE-2026-13187 | HIGH | 8.1 | 0.3% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler provider type input may be tampered with, potentia... |
| CVE-2026-13186 | HIGH | 8.1 | 0.5% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, a path traversal vulnerability in the file-based persistence sto... |
| CVE-2026-13185 | HIGH | 8.1 | 0.5% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersistenceManager... |
| CVE-2026-13184 | HIGH | 7.5 | 0.2% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKe... |
| CVE-2026-13183 | HIGH | 7.5 | 0.3% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload upload metadata processing may leak cryptographic... |
| CVE-2026-13182 | HIGH | 7.5 | 0.3% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish decrypt f... |
| CVE-2026-13181 | HIGH | 8.1 | 0.5% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeName process... |
| CVE-2026-8152 | CRITICAL | 9.3 | — | Jul 22, 2026 | Unblu Spark contains an open redirect vulnerability that can be escalated to a DOM-based cross-site scripting (XSS) atta... |