CVE Vulnerability Database
Search and browse 424,998 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-87108 | MEDIUM | 4.3 | 0.1% | Oct 9, 2026 | An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated w... |
| CVE-2026-107914 | HIGH | 7.8 | 0.1% | Oct 9, 2026 | Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when deliverin... |
| CVE-2026-107911 | HIGH | 7.5 | 0.4% | Oct 9, 2026 | A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 all... |
| CVE-2026-107910 | HIGH | 8.1 | 0.5% | Oct 9, 2026 | An improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c) in FalkorDB before 4.20.... |
| CVE-2026-107909 | CRITICAL | 9.1 | 0.4% | Oct 9, 2026 | A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/b... |
| CVE-2026-107908 | CRITICAL | 9.8 | 0.6% | Oct 9, 2026 | A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows ... |
| CVE-2026-7827 | HIGH | 8.1 | 0.6% | Oct 9, 2026 | A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decod... |
| CVE-2026-7826 | CRITICAL | 9.1 | 0.4% | Oct 9, 2026 | A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in Fal... |
| CVE-2026-5759 | CRITICAL | 9.8 | 0.6% | Oct 9, 2026 | A double free and use-after-free vulnerability in the RdbLoadDeletedNodes function of the RDB graph decoders (src/serial... |
| CVE-2026-107890 | MEDIUM | 5.5 | 0.1% | Oct 9, 2026 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation re... |
| CVE-2026-107889 | MEDIUM | 5.5 | 0.3% | Oct 9, 2026 | A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter respon... |
| CVE-2026-107888 | MEDIUM | 5.5 | 0.1% | Oct 9, 2026 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-cr... |
| CVE-2026-107886 | MEDIUM | 6.5 | 0.1% | Oct 9, 2026 | OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces ... |
| CVE-2026-107885 | MEDIUM | 5.5 | 0.1% | Oct 9, 2026 | OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cups... |
| CVE-2026-97032 | HIGH | 7.5 | 0.2% | Oct 8, 2026 | HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because... |
| CVE-2026-97031 | HIGH | 7.5 | 0.2% | Oct 8, 2026 | Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted... |
| CVE-2026-97030 | MEDIUM | 6.1 | 0.2% | Oct 8, 2026 | A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not ... |
| CVE-2026-96207 | CRITICAL | 10 | 0.5% | Oct 8, 2026 | Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a... |
| CVE-2026-94510 | CRITICAL | 9.9 | 0.4% | Oct 8, 2026 | Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privil... |
| CVE-2026-94448 | MEDIUM | 6.1 | 0.2% | Oct 8, 2026 | When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset u... |
| CVE-2026-94447 | HIGH | 7.8 | 0.1% | Oct 8, 2026 | Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and... |
| CVE-2026-94444 | HIGH | 7.8 | 0.1% | Oct 8, 2026 | Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a mal... |
| CVE-2026-94440 | HIGH | 7.5 | 0.2% | Oct 8, 2026 | Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit... |
| CVE-2026-94439 | HIGH | 7.5 | 0.2% | Oct 8, 2026 | When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connecti... |
| CVE-2026-88131 | CRITICAL | 9.8 | 0.8% | Oct 8, 2026 | Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network. |