CVE Vulnerability Database
Search and browse 386,282 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-16492 | MEDIUM | 5.5 | 1.7% | Jul 22, 2026 | A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of ... |
| CVE-2026-16490 | MEDIUM | 6.3 | 0.2% | Jul 22, 2026 | A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of t... |
| CVE-2026-63263 | MEDIUM | 6.5 | 0.2% | Jul 22, 2026 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansio... |
| CVE-2026-63262 | MEDIUM | 4.3 | 0.2% | Jul 22, 2026 | Missing Authorization (CWE-862) in Kibana can lead to unauthorized cross-space information disclosure via user-supplied ... |
| CVE-2026-16489 | MEDIUM | 5.3 | 0.6% | Jul 22, 2026 | A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function _execCommand in the library lib... |
| CVE-2026-16488 | MEDIUM | 5 | 1.0% | Jul 22, 2026 | A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the function subprocess.Po... |
| CVE-2026-63261 | MEDIUM | 6.5 | 0.3% | Jul 21, 2026 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)... |
| CVE-2026-63260 | MEDIUM | 6.5 | 0.3% | Jul 21, 2026 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)... |
| CVE-2026-63259 | MEDIUM | 4.3 | 0.2% | Jul 21, 2026 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via user-supplie... |
| CVE-2026-63145 | MEDIUM | 4.3 | 0.2% | Jul 21, 2026 | Incorrect Authorization (CWE-863) in Kibana can lead to integrity compromise of Machine Learning audit and notification ... |
| CVE-2026-63144 | MEDIUM | 6.5 | 0.2% | Jul 21, 2026 | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request s... |
| CVE-2026-63143 | MEDIUM | 4.3 | 0.2% | Jul 21, 2026 | Missing Authorization (CWE-862) in Kibana can lead to unauthorized information disclosure via Privilege Abuse (CAPEC-122... |
| CVE-2026-63142 | MEDIUM | 5 | 0.2% | Jul 21, 2026 | Incomplete List of Disallowed Inputs (CWE-184) in Kibana can allow an authenticated attacker with access to the Reportin... |
| CVE-2026-56820 | CRITICAL | 9.1 | 0.2% | Jul 21, 2026 | Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final throug... |
| CVE-2026-56819 | HIGH | 7.5 | 0.3% | Jul 21, 2026 | Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final throug... |
| CVE-2026-56817 | CRITICAL | 9.8 | 0.3% | Jul 21, 2026 | Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final throug... |
| CVE-2026-16517 | LOW | 2.9 | 0.1% | Jul 21, 2026 | A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header function i... |
| CVE-2026-16486 | MEDIUM | 4.3 | 0.3% | Jul 21, 2026 | A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the f... |
| CVE-2026-16485 | MEDIUM | 4.3 | 0.3% | Jul 21, 2026 | A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some u... |
| CVE-2026-16424 | CRITICAL | 9.6 | 0.2% | Jul 21, 2026 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised ... |
| CVE-2026-16423 | HIGH | 8.8 | 0.2% | Jul 21, 2026 | Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage i... |
| CVE-2026-16422 | HIGH | 7.5 | 0.1% | Jul 21, 2026 | Insufficient validation of untrusted input in Certificate in Google Chrome on Linux prior to 150.0.7871.182 allowed an a... |
| CVE-2026-16421 | HIGH | 8.8 | 0.2% | Jul 21, 2026 | Inappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute a... |
| CVE-2026-16420 | HIGH | 8.8 | 0.2% | Jul 21, 2026 | Type Confusion in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code ... |
| CVE-2026-16419 | CRITICAL | 9.6 | 0.2% | Jul 21, 2026 | Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to p... |