CVE Vulnerability Database
Search and browse 424,279 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-95127 | HIGH | 7.5 | 0.3% | Oct 13, 2026 | An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in lib... |
| CVE-2026-95124 | HIGH | 7.5 | 0.5% | Oct 13, 2026 | Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via... |
| CVE-2026-95122 | HIGH | 7.5 | 0.5% | Oct 13, 2026 | mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allo... |
| CVE-2026-95121 | HIGH | 7.8 | 0.1% | Oct 13, 2026 | An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.... |
| CVE-2026-95117 | LOW | 3.7 | 0.3% | Oct 13, 2026 | Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via... |
| CVE-2026-95115 | HIGH | 7.5 | 0.5% | Oct 13, 2026 | Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via t... |
| CVE-2026-95114 | HIGH | 7.5 | 0.5% | Oct 13, 2026 | libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allow... |
| CVE-2026-77375 | MEDIUM | 6.5 | — | Oct 13, 2026 | SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malf... |
| CVE-2026-77100 | HIGH | 8.7 | 0.3% | Oct 13, 2026 | MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to r... |
| CVE-2026-77099 | CRITICAL | 9.3 | 0.4% | Oct 13, 2026 | CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenanc... |
| CVE-2026-77096 | HIGH | 7.7 | 0.2% | Oct 13, 2026 | CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved m... |
| CVE-2026-77095 | HIGH | 7.1 | 0.2% | Oct 13, 2026 | CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maint... |
| CVE-2026-77094 | HIGH | 7.1 | 0.2% | Oct 13, 2026 | CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenan... |
| CVE-2026-77093 | HIGH | 7.1 | 0.2% | Oct 13, 2026 | CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance ... |
| CVE-2026-77090 | HIGH | 8.7 | 0.3% | Oct 13, 2026 | CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software custome... |
| CVE-2026-65200 | LOW | 3.5 | 0.1% | Oct 13, 2026 | The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three... |
| CVE-2026-65199 | MEDIUM | 5.4 | 0.1% | Oct 13, 2026 | openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privil... |
| CVE-2026-65198 | HIGH | 8.6 | 0.2% | Oct 13, 2026 | Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker wh... |
| CVE-2026-65197 | LOW | 3.1 | 0.1% | Oct 13, 2026 | H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file `/co... |
| CVE-2026-53711 | MEDIUM | 5.1 | 0.4% | Oct 13, 2026 | MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts fe... |
| CVE-2026-53709 | CRITICAL | 9.8 | 0.5% | Oct 13, 2026 | MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example s... |
| CVE-2026-53420 | HIGH | 8 | — | Oct 13, 2026 | Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalat... |
| CVE-2026-53418 | HIGH | 8.1 | — | Oct 13, 2026 | Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an ... |
| CVE-2026-4869 | MEDIUM | 5.4 | 0.1% | Oct 13, 2026 | A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compress... |
| CVE-2026-18228 | HIGH | 7.1 | 0.4% | Oct 13, 2026 | HyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved ma... |