CVE Vulnerability Database
Search and browse 424,998 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-11939 | MEDIUM | 5.3 | 0.2% | Oct 8, 2026 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may be vulnerable to... |
| CVE-2026-11936 | MEDIUM | 5.4 | 0.1% | Oct 8, 2026 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management int... |
| CVE-2026-11930 | HIGH | 7.5 | 0.2% | Oct 8, 2026 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may not enforce auth... |
| CVE-2026-11888 | HIGH | 7.5 | 0.2% | Oct 8, 2026 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to an ... |
| CVE-2026-11318 | HIGH | 7.8 | — | Oct 8, 2026 | Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service tha... |
| CVE-2026-107782 | HIGH | 7.8 | 0.1% | Oct 8, 2026 | System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows l... |
| CVE-2026-107781 | HIGH | 7.4 | 0.3% | Oct 8, 2026 | Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missin... |
| CVE-2026-107780 | CRITICAL | 9.8 | 2.1% | Oct 8, 2026 | Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in... |
| CVE-2026-107779 | CRITICAL | 9.8 | 0.5% | Oct 8, 2026 | Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a missing authentication vulnerability i... |
| CVE-2026-107778 | MEDIUM | 6.5 | — | Oct 8, 2026 | MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows au... |
| CVE-2026-107708 | MEDIUM | 4.9 | 0.5% | Oct 8, 2026 | MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that r... |
| CVE-2026-107397 | MEDIUM | 4.4 | 0.2% | Oct 8, 2026 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior t... |
| CVE-2026-107318 | HIGH | 7.4 | — | Oct 8, 2026 | @fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to... |
| CVE-2026-106435 | MEDIUM | 4.7 | 0.1% | Oct 8, 2026 | The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON cont... |
| CVE-2026-102368 | MEDIUM | 5.4 | — | Oct 8, 2026 | Affected Tapo device firmware stores device-specific cryptographic material in plaintext within nonvolatile storage. An ... |
| CVE-2026-101024 | HIGH | 8.8 | — | Oct 8, 2026 | Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export function... |
| CVE-2026-84275 | HIGH | 7.5 | 0.3% | Oct 8, 2026 | IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticat... |
| CVE-2026-84274 | MEDIUM | 6.5 | — | Oct 8, 2026 | IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API... |
| CVE-2026-84272 | CRITICAL | 9.8 | 0.4% | Oct 8, 2026 | IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. ... |
| CVE-2026-84271 | HIGH | 7.8 | 0.1% | Oct 8, 2026 | IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker w... |
| CVE-2026-84250 | HIGH | 7.8 | 0.1% | Oct 8, 2026 | IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in th... |
| CVE-2026-84245 | HIGH | 7.8 | 0.1% | Oct 8, 2026 | IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A low-privi... |
| CVE-2026-84244 | MEDIUM | 6.1 | 0.2% | Oct 8, 2026 | IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XS... |
| CVE-2026-82344 | CRITICAL | 9.8 | 0.4% | Oct 8, 2026 | IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login ... |
| CVE-2026-82335 | CRITICAL | 9.8 | 0.4% | Oct 8, 2026 | IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol pars... |