CVE Vulnerability Database

Search and browse 424,993 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-75351HIGH7.5OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path pa...
CVE-2026-75350HIGH7.5EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation fo...
CVE-2026-108096MEDIUM6.5Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Cat...
CVE-2026-107841MEDIUM5.7pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0....
CVE-2026-107840HIGH7.5yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics ...
CVE-2026-107839HIGH7.5ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age...
CVE-2026-107838HIGH7.5RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded syste...
CVE-2026-107837HIGH8.2RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded syste...
CVE-2026-107836HIGH7.1RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded syste...
CVE-2026-107835MEDIUM4OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Prior to 3.8.1, internal/cookies.P...
CVE-2026-107834MEDIUM5.3OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the multip...
CVE-2026-107833MEDIUM5.9OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessRes...
CVE-2026-107826HIGH7.5OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, readJSON i...
CVE-2026-107825MEDIUM4OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessURI...
CVE-2026-107824CRITICAL9.3x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functional...
CVE-2026-107823HIGH7.2MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3...
CVE-2026-107822MEDIUM6.4MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3...
CVE-2026-107821HIGH8MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3...
CVE-2026-107820MEDIUM5.3x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functional...
CVE-2026-107819MEDIUM5.9MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1...
CVE-2026-107818HIGH8.4MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3...
CVE-2026-107817MEDIUM4.4MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3...
CVE-2026-107816MEDIUM6.4MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3...
CVE-2026-75597MEDIUM5.3pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the `/web/<path:filename>`...
CVE-2026-75347HIGH7.5EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the Et...