CVE Vulnerability Database
Search and browse 424,301 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109709 | HIGH | 8.8 | — | Oct 13, 2026 | Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed... |
| CVE-2026-109708 | CRITICAL | 9.6 | 0.3% | Oct 13, 2026 | Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox... |
| CVE-2026-109707 | CRITICAL | 9.6 | 0.3% | Oct 13, 2026 | Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox E... |
| CVE-2026-109706 | MEDIUM | 5.4 | — | Oct 13, 2026 | Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Fir... |
| CVE-2026-109705 | CRITICAL | 9.6 | 0.3% | Oct 13, 2026 | Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. T... |
| CVE-2026-109704 | HIGH | 8.8 | 0.2% | Oct 13, 2026 | Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5... |
| CVE-2026-109407 | LOW | 3.1 | 0.3% | Oct 13, 2026 | A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of... |
| CVE-2026-109406 | MEDIUM | 5.4 | — | Oct 13, 2026 | A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderSer... |
| CVE-2026-109405 | HIGH | 7.3 | 0.5% | Oct 13, 2026 | A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the function KafkaPublish... |
| CVE-2026-109404 | MEDIUM | 5.3 | — | Oct 13, 2026 | A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown func... |
| CVE-2026-109403 | HIGH | 7.3 | 0.4% | Oct 13, 2026 | A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A... |
| CVE-2026-94410 | MEDIUM | 4.3 | 0.2% | Oct 13, 2026 | A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This ... |
| CVE-2026-89279 | MEDIUM | 6.5 | 0.1% | Oct 13, 2026 | Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing. T... |
| CVE-2026-63316 | HIGH | 8.7 | 0.3% | Oct 13, 2026 | A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into... |
| CVE-2026-109832 | HIGH | 7.5 | 0.6% | Oct 13, 2026 | A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable ... |
| CVE-2026-109402 | MEDIUM | 6.3 | — | Oct 13, 2026 | A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file a... |
| CVE-2026-109190 | MEDIUM | 6.3 | 0.3% | Oct 13, 2026 | A vulnerability has been found in conductor-oss conductor 3.31.2. This affects the function ListApiToolsTask.start of th... |
| CVE-2026-109189 | MEDIUM | 6.3 | — | Oct 13, 2026 | A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the function Swagger3Pars... |
| CVE-2026-109160 | MEDIUM | 4.3 | 0.3% | Oct 13, 2026 | A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent... |
| CVE-2026-109157 | CRITICAL | 9.9 | — | Oct 13, 2026 | A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup ... |
| CVE-2026-109156 | MEDIUM | 6.3 | 0.4% | Oct 13, 2026 | A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function _extract_env of the file mlser... |
| CVE-2026-109155 | MEDIUM | 6.3 | — | Oct 13, 2026 | A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler... |
| CVE-2026-109153 | MEDIUM | 6.3 | 0.5% | Oct 13, 2026 | A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file... |
| CVE-2026-89208 | MEDIUM | 5.3 | 0.4% | Oct 13, 2026 | A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R... |
| CVE-2026-89206 | MEDIUM | 6.3 | 0.3% | Oct 13, 2026 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfor... |