CVE Vulnerability Database
Search and browse 424,998 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-82334 | CRITICAL | 9.1 | 0.3% | Oct 8, 2026 | IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protoc... |
| CVE-2026-107707 | HIGH | 7.8 | 0.1% | Oct 8, 2026 | Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that all... |
| CVE-2026-107706 | MEDIUM | 4.3 | — | Oct 8, 2026 | Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.ph... |
| CVE-2026-107705 | MEDIUM | 6.5 | 0.3% | Oct 8, 2026 | Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers ... |
| CVE-2026-107608 | MEDIUM | 5.5 | — | Oct 8, 2026 | Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 migh... |
| CVE-2026-107396 | MEDIUM | 5.4 | 0.2% | Oct 8, 2026 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior t... |
| CVE-2026-107395 | MEDIUM | 4.3 | — | Oct 8, 2026 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior t... |
| CVE-2026-107394 | MEDIUM | 6.8 | 0.3% | Oct 8, 2026 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior t... |
| CVE-2026-107393 | MEDIUM | 6.1 | 0.2% | Oct 8, 2026 | FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.235, when APP_CLOUDFLARE_IS_USED is enabled, FreeS... |
| CVE-2026-107392 | HIGH | 7.5 | 0.2% | Oct 8, 2026 | music-metadata is a metadata parser for audio and video media files. Prior to 11.15.0, the DSF parser handles an unrecog... |
| CVE-2026-107391 | HIGH | 7.5 | 0.1% | Oct 8, 2026 | music-metadata is a metadata parser for audio and video media files. In the public development revision introduced after... |
| CVE-2026-107390 | HIGH | 7.5 | 0.1% | Oct 8, 2026 | music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the MP4 parser accepts an attacke... |
| CVE-2026-107389 | MEDIUM | 5.5 | 0.1% | Oct 8, 2026 | music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the Matroska and WebM EBML parser... |
| CVE-2026-106436 | MEDIUM | 6.5 | 0.3% | Oct 8, 2026 | The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size lim... |
| CVE-2026-106432 | HIGH | 8.2 | 0.1% | Oct 8, 2026 | The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affect... |
| CVE-2026-106126 | CRITICAL | 9.9 | — | Oct 8, 2026 | A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an ... |
| CVE-2026-104076 | CRITICAL | 9.1 | — | Oct 8, 2026 | TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain a missing authentication vulnerabi... |
| CVE-2026-104075 | CRITICAL | 9.8 | 0.6% | Oct 8, 2026 | TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain an authentication bypass vulnerabi... |
| CVE-2026-95209 | — | — | 0.2% | Oct 8, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn b... |
| CVE-2026-88648 | LOW | 3.7 | 0.2% | Oct 8, 2026 | In GnuTLS v3.8.13, an excluded msUPN/SRV otherName is never checked. NOTE: the Supplier does not consider this an action... |
| CVE-2026-84290 | MEDIUM | 5.1 | 0.1% | Oct 8, 2026 | IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the Wfp... |
| CVE-2026-84278 | HIGH | 7.2 | 2.2% | Oct 8, 2026 | IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper c... |
| CVE-2026-84276 | HIGH | 7.5 | 0.3% | Oct 8, 2026 | IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthen... |
| CVE-2026-67693 | LOW | 3.7 | 0.2% | Oct 8, 2026 | GnuTLS v3.8.13 does not reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) ... |
| CVE-2026-40804 | HIGH | 7.1 | — | Oct 8, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kodezen LLC aBlock... |