CVE Vulnerability Database
Search and browse 424,678 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-85972 | HIGH | 7.4 | 0.3% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the ide... |
| CVE-2026-85971 | HIGH | 7.1 | 0.1% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating... |
| CVE-2026-85970 | HIGH | 7.1 | 0.3% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 enable XML external entity process... |
| CVE-2026-85969 | HIGH | 7.1 | 0.2% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vul... |
| CVE-2026-85968 | HIGH | 7.1 | 0.3% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 contain an out-of-bounds read vulnerability in certain query-proce... |
| CVE-2026-85967 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vul... |
| CVE-2026-85966 | HIGH | 7.7 | 0.3% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently restrict acces... |
| CVE-2026-85965 | HIGH | 8 | 0.2% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in t... |
| CVE-2026-85964 | HIGH | 7.7 | 0.4% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Conso... |
| CVE-2026-85963 | HIGH | 7.5 | 0.3% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 include deprecated OpsDirector fun... |
| CVE-2026-85962 | HIGH | 7.5 | 0.3% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication... |
| CVE-2026-85961 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record s... |
| CVE-2026-85960 | HIGH | 7.5 | 0.1% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Que... |
| CVE-2026-85959 | HIGH | 7.5 | 0.3% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record success... |
| CVE-2026-85958 | HIGH | 7.5 | 0.3% | Oct 12, 2026 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validati... |
| CVE-2026-85957 | HIGH | 7.5 | 0.3% | Oct 12, 2026 | Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a SAML parser configuration that can process external... |
| CVE-2026-84286 | CRITICAL | 9.8 | 0.2% | Oct 12, 2026 | ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA kernel without first verifying that the... |
| CVE-2026-75888 | HIGH | 7.7 | 0.4% | Oct 12, 2026 | A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF... |
| CVE-2026-109374 | MEDIUM | 5.5 | 0.2% | Oct 12, 2026 | ZITADEL 3.0.0 before 4.19.2 contains a privilege escalation vulnerability in OIDC token exchange that allows end-user im... |
| CVE-2026-109373 | HIGH | 8.1 | 0.4% | Oct 12, 2026 | ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticat... |
| CVE-2026-109372 | HIGH | 8.7 | 0.4% | Oct 12, 2026 | ZITADEL 4.x before 4.19.2 and 3.x through 3.4.15 contains an authentication bypass in the SAML identity-provider intent ... |
| CVE-2026-109371 | HIGH | 8.2 | 0.4% | Oct 12, 2026 | ZITADEL 3.0.0 before 4.18.0 contains a missing authentication vulnerability in the hosted Login V1 UI, where the change-... |
| CVE-2026-109366 | LOW | 3.7 | 0.2% | Oct 12, 2026 | Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allo... |
| CVE-2026-109365 | LOW | 3.7 | 0.1% | Oct 12, 2026 | Zebra before 6.4.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated peers to forc... |
| CVE-2026-109364 | MEDIUM | 5.3 | 0.2% | Oct 12, 2026 | Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because... |