CVE Vulnerability Database
Search and browse 424,660 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108929 | CRITICAL | 9.9 | 0.4% | Oct 12, 2026 | A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSs... |
| CVE-2026-108928 | MEDIUM | 6.3 | 0.3% | Oct 12, 2026 | A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown ... |
| CVE-2026-108927 | MEDIUM | 6.3 | 0.3% | Oct 12, 2026 | A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vulnerability affects unk... |
| CVE-2026-106495 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package ... |
| CVE-2026-105052 | HIGH | 7.5 | 0.6% | Oct 12, 2026 | IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on the ... |
| CVE-2025-71429 | CRITICAL | 9.8 | 2.9% | Oct 12, 2026 | GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthen... |
| CVE-2024-58389 | MEDIUM | 6.1 | 0.3% | Oct 12, 2026 | HoloViz Panel from 1.2.2 before 1.9.0 contains an open redirect vulnerability in panel/auth.py that allows remote attack... |
| CVE-2022-51020 | MEDIUM | 5.9 | 0.1% | Oct 12, 2026 | Flower before 2.2.0 contains a cross-site request forgery vulnerability because Tornado xsrf_cookies is disabled and the... |
| CVE-2021-48012 | HIGH | 8.2 | 0.4% | Oct 12, 2026 | fast-toml through 0.5.4 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by... |
| CVE-2021-48011 | HIGH | 7.5 | 0.6% | Oct 12, 2026 | Servor 1.0.0 through 4.0.2 contains a path traversal vulnerability that allows unauthenticated remote attackers to escap... |
| CVE-2020-37280 | HIGH | 7.5 | 0.5% | Oct 12, 2026 | cbor-sync through 1.0.4 contains a resource exhaustion vulnerability in CBOR.decode that trusts declared array and map l... |
| CVE-2020-37279 | HIGH | 8.1 | 1.5% | Oct 12, 2026 | easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command injection vulnerability that allows attackers to execute comma... |
| CVE-2026-96012 | CRITICAL | 9.9 | 0.5% | Oct 12, 2026 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a ma... |
| CVE-2026-95838 | MEDIUM | 4.6 | 0.2% | Oct 12, 2026 | containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack han... |
| CVE-2026-95837 | HIGH | 7.8 | 0.1% | Oct 12, 2026 | containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer check... |
| CVE-2026-41510 | HIGH | 7.2 | 0.5% | Oct 12, 2026 | OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, Coraza sil... |
| CVE-2026-109575 | CRITICAL | 9.8 | 0.4% | Oct 12, 2026 | In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has... |
| CVE-2026-109425 | MEDIUM | 5.3 | 0.2% | Oct 12, 2026 | Tink-go (tink-crypto/tink-go) through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecre... |
| CVE-2026-109424 | MEDIUM | 5.9 | 0.2% | Oct 12, 2026 | NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a weak encryption vul... |
| CVE-2026-109423 | HIGH | 7.4 | 0.2% | Oct 12, 2026 | NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate val... |
| CVE-2026-109422 | HIGH | 8.1 | 0.5% | Oct 12, 2026 | NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a remote code executi... |
| CVE-2026-108926 | MEDIUM | 6.3 | 0.2% | Oct 12, 2026 | A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This affects an unknown p... |
| CVE-2026-108924 | MEDIUM | 4.3 | 0.4% | Oct 12, 2026 | A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function OptionsQuery:... |
| CVE-2026-108923 | MEDIUM | 6.3 | 0.4% | Oct 12, 2026 | A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functi... |
| CVE-2026-108362 | CRITICAL | 9.1 | 0.2% | Oct 12, 2026 | Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior ... |