CVE Vulnerability Database

Search and browse 424,094 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-106613HIGH8.8ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in th...
CVE-2026-106612CRITICAL9.9ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the ...
CVE-2026-106090HIGH8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the ...
CVE-2026-106089HIGH8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the ...
CVE-2026-105994HIGH7.7ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low...
CVE-2026-105903CRITICAL9.9ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result i...
CVE-2026-105901HIGH8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the ...
CVE-2026-105900HIGH7.5ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-servi...
CVE-2026-105899CRITICAL10ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrar...
CVE-2026-105898HIGH8.2ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the ...
CVE-2026-105897HIGH8.6ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. ...
CVE-2026-105896MEDIUM5.5Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-...
CVE-2026-105443HIGH8.2IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing...
CVE-2026-105442HIGH7.5IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 ...
CVE-2026-104587MEDIUM5.4blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability. The application uses te...
CVE-2026-104348HIGH7.8Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio...
CVE-2026-104347HIGH7.8Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t...
CVE-2026-104346HIGH7.8Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t...
CVE-2026-103829MEDIUM5.5Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denia...
CVE-2026-103828MEDIUM5.5Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denia...
CVE-2026-103827MEDIUM5.5Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application de...
CVE-2026-103826MEDIUM5.5Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denia...
CVE-2026-103825MEDIUM5.5Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem...
CVE-2026-103824MEDIUM5.5Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denia...
CVE-2026-103823MEDIUM5.5Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application de...