CVE Vulnerability Database
Search and browse 424,094 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-103822 | MEDIUM | 5.5 | 0.2% | Oct 13, 2026 | Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem... |
| CVE-2026-103821 | HIGH | 7.8 | 0.1% | Oct 13, 2026 | Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution... |
| CVE-2026-101294 | HIGH | 8.7 | 0.2% | Oct 13, 2026 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 ... |
| CVE-2026-100131 | MEDIUM | 5.5 | 0.2% | Oct 13, 2026 | Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memo... |
| CVE-2026-100130 | MEDIUM | 5.5 | 0.2% | Oct 13, 2026 | Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memo... |
| CVE-2026-100129 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context ... |
| CVE-2026-100128 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context ... |
| CVE-2026-100127 | HIGH | 7.8 | 0.1% | Oct 13, 2026 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context ... |
| CVE-2026-100126 | MEDIUM | 5.5 | 0.2% | Oct 13, 2026 | Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker... |
| CVE-2026-100112 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t... |
| CVE-2026-100111 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t... |
| CVE-2026-90532 | CRITICAL | 10 | 0.8% | Oct 13, 2026 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code exe... |
| CVE-2026-90531 | CRITICAL | 9.6 | 1.4% | Oct 13, 2026 | Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability t... |
| CVE-2026-86022 | HIGH | 7 | 0.1% | Oct 13, 2026 | VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in doubl... |
| CVE-2026-86016 | HIGH | 8.2 | 0.2% | Oct 13, 2026 | VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_metaData` in src/data/... |
| CVE-2026-83960 | MEDIUM | 5.4 | 0.2% | Oct 13, 2026 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit ... |
| CVE-2026-83958 | MEDIUM | 5.4 | 0.2% | Oct 13, 2026 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit ... |
| CVE-2026-83662 | CRITICAL | 9.3 | 1.0% | Oct 13, 2026 | Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit ... |
| CVE-2026-75732 | CRITICAL | 9.9 | 0.7% | Oct 13, 2026 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code exe... |
| CVE-2026-70098 | HIGH | 8.8 | 0.6% | Oct 13, 2026 | Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. |
| CVE-2026-63174 | HIGH | 8.1 | 0.2% | Oct 13, 2026 | Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator ... |
| CVE-2026-63172 | HIGH | 7.1 | 0.2% | Oct 13, 2026 | Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a regular, non-adminis... |
| CVE-2026-63165 | HIGH | 8.1 | 0.3% | Oct 13, 2026 | Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functionality that allows ... |
| CVE-2026-63163 | HIGH | 7.5 | 0.4% | Oct 13, 2026 | Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route th... |
| CVE-2026-63162 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary ... |