CVE Vulnerability Database
Search and browse 424,660 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-90920 | CRITICAL | 9.8 | 0.5% | Oct 12, 2026 | IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control o... |
| CVE-2026-90912 | HIGH | 7.5 | 0.3% | Oct 12, 2026 | IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontroll... |
| CVE-2026-90911 | HIGH | 7.5 | 0.3% | Oct 12, 2026 | IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled re... |
| CVE-2026-84312 | HIGH | 7.1 | 0.2% | Oct 12, 2026 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, GetCasdoorUri uses the configured Casdoor app... |
| CVE-2026-54459 | MEDIUM | 4.3 | — | Oct 12, 2026 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0,... |
| CVE-2026-53922 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In commit cfddd56 and earlier, an unauthe... |
| CVE-2026-49484 | MEDIUM | 5.1 | 0.2% | Oct 12, 2026 | Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior... |
| CVE-2026-49483 | HIGH | 8.9 | 0.1% | Oct 12, 2026 | Code for IBMi is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior ... |
| CVE-2026-44828 | CRITICAL | 9.3 | 0.4% | Oct 12, 2026 | Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/init_step/ through init... |
| CVE-2026-41210 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Moonlight Qt is a GameStream client for Windows, macOS, Linux, and Steam Link. In version 6.1.0 and earlier, after a vic... |
| CVE-2026-108934 | LOW | 2.4 | — | Oct 12, 2026 | A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality... |
| CVE-2026-108933 | LOW | 2.4 | 0.2% | Oct 12, 2026 | A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an unknown function of the file /goform/formFilter.... |
| CVE-2026-108932 | MEDIUM | 4.3 | 0.3% | Oct 12, 2026 | A vulnerability was determined in Netcore NR268 1.7.121109. This impacts the function eval of the file filter_hosts_dump... |
| CVE-2026-104140 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGI... |
| CVE-2026-103658 | MEDIUM | 5.9 | 0.2% | Oct 12, 2026 | GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its... |
| CVE-2026-102596 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Nango is an open-source platform for connecting agents and products to third-party APIs. Prior to 0.70.9, on accounts wi... |
| CVE-2026-102539 | MEDIUM | 5.7 | 0.1% | Oct 12, 2026 | Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. From 17.3.0 u... |
| CVE-2026-97691 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Convex is an open-source reactive database for application developers. Prior to the self-hosted image published on Augus... |
| CVE-2026-96266 | HIGH | 8.2 | 0.2% | Oct 12, 2026 | IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration par... |
| CVE-2026-96265 | HIGH | 8.2 | 0.2% | Oct 12, 2026 | IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox i... |
| CVE-2026-96264 | HIGH | 8.2 | 0.2% | Oct 12, 2026 | IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox ... |
| CVE-2026-96263 | HIGH | 8.2 | 0.2% | Oct 12, 2026 | IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is ... |
| CVE-2026-96262 | HIGH | 8.2 | 0.2% | Oct 12, 2026 | IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox i... |
| CVE-2026-96261 | HIGH | 7.3 | 0.1% | Oct 12, 2026 | IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration par... |
| CVE-2026-92120 | CRITICAL | 9.1 | 0.1% | Oct 12, 2026 | OAuth1 Request Replay Attack vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Use... |