CVE Vulnerability Database
Search and browse 424,678 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109363 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the... |
| CVE-2026-109362 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep exec... |
| CVE-2026-109361 | HIGH | 7.3 | 0.2% | Oct 12, 2026 | MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in nnUNetV2Runner that unpickles the postpro... |
| CVE-2026-109360 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | MONAI 0.4.0 before 1.6.1 contains a remote code execution vulnerability that allows on-path attackers to execute code by... |
| CVE-2026-109359 | HIGH | 7.7 | 0.1% | Oct 12, 2026 | Contrast 1.8.0 before 1.24.1 contains an improper verification vulnerability in Coordinator peer recovery that fails to ... |
| CVE-2026-109358 | HIGH | 7.8 | 0.1% | Oct 12, 2026 | Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer w... |
| CVE-2026-109357 | HIGH | 8.1 | 0.5% | Oct 12, 2026 | LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because userna... |
| CVE-2026-109356 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | LibreNMS before 26.9.0 contains a missing authorization vulnerability in PortsController::purge that allows global-read ... |
| CVE-2026-109355 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in get_oxidized_nodes_list() that renders Ox... |
| CVE-2026-109354 | MEDIUM | 4.3 | 0.3% | Oct 12, 2026 | LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsen_channel_common.inc.php that allows authenticated... |
| CVE-2026-109353 | HIGH | 7.1 | 0.2% | Oct 12, 2026 | LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying... |
| CVE-2026-109352 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.p... |
| CVE-2026-109351 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory allocation vulnerability that allows remote attackers to... |
| CVE-2026-109350 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch ... |
| CVE-2026-109349 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | gitoxide gix-pack before 0.75.0 contains a reachable assertion in BytesToEntriesIter::new_from_header: the pack header d... |
| CVE-2026-109348 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU throu... |
| CVE-2026-109347 | HIGH | 7.2 | 0.6% | Oct 12, 2026 | Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATT... |
| CVE-2026-109346 | HIGH | 8.1 | 0.3% | Oct 12, 2026 | better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization... |
| CVE-2026-109345 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | DOMPurify before 3.4.16 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization becau... |
| CVE-2026-109344 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | DOMPurify from 3.4.13 before 3.4.16 contains a cross-site scripting vulnerability because IN_PLACE mode fails to neutral... |
| CVE-2026-109343 | HIGH | 8.1 | 0.3% | Oct 12, 2026 | SurrealDB before 3.3.0 allows cross-tenant access because the SurrealQL USE statement switches a session to any namespac... |
| CVE-2026-109342 | MEDIUM | 5.4 | 0.3% | Oct 12, 2026 | SurrealDB from 3.0.0 before 3.3.0 contains a missing authentication vulnerability in the revoke RPC method that allows l... |
| CVE-2026-109341 | HIGH | 7.1 | 0.3% | Oct 12, 2026 | SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table-level write permiss... |
| CVE-2026-109340 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | SurrealDB from 3.1.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated users to dele... |
| CVE-2026-109339 | MEDIUM | 4.9 | 0.4% | Oct 12, 2026 | SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust server memory because module stdout/stderr lines are buffer... |