CVE Vulnerability Database

Search and browse 419,324 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-54145HIGH8.8OpenHuman is an open-source agent harness available as a desktop application and Rust library. In affected versions befo...
CVE-2026-54144MEDIUM6.1OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0 on macOS, t...
CVE-2026-54143CRITICAL9.8OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version 0.57.13, a...
CVE-2026-54142HIGH8.7OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13, backgroun...
CVE-2026-54141CRITICAL9OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13, a remote ...
CVE-2026-54140HIGH8.3OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13, OpenHuman...
CVE-2026-49407HIGH7.7OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version 0.57.44, i...
CVE-2026-49405MEDIUM6.2OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0, the local ...
CVE-2026-49393HIGH8.4OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0, the core s...
CVE-2026-123151HIGH7.5A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a malicious target can cause GDB...
CVE-2026-121997HIGH8.1A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native...
CVE-2026-121996HIGH8.2A length validation flaw in gdbserver's agent-expression parser allows an unauthenticated remote attacker to read uninit...
CVE-2026-121995HIGH7.5A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrup...
CVE-2026-121994HIGH8.8A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-controlled debug target to execut...
CVE-2026-120499HIGH7.8h5io before 0.2.6 contains a code injection vulnerability in read_hdf5() that allows attackers to execute arbitrary code...
CVE-2026-119083HIGH7.8Path traversal in the archive extraction utility in GluonTS before 0.17.0 might allow an actor who supplies a crafted ta...
CVE-2026-118517MEDIUM4.3The Symfony HtmlSanitizer component UrlSanitizer parses URLs differently from browsers, allowing the allowLinkHosts() an...
CVE-2026-114232HIGH8.1A flaw was found in the UserManagedPermissionService of the Keycloak authorization server. The UMA Protection API, which...
CVE-2026-112208HIGH8.1A flaw was found in the Organization identity-first login flow of the Keycloak authentication server. Keycloak is an ope...
CVE-2026-111253MEDIUM6.6A flaw was found in dnf5daemon-server. Session methods on dynamically exported D-Bus session objects do not verify that ...
CVE-2026-110932HIGH7.5A flaw was found in the theme resource endpoint of Keycloak, an open-source identity and access management solution. The...
CVE-2026-110931HIGH7.5A flaw was found in the SAML 1.1 assertion parser of Keycloak, a tool used for identity and access management. The issue...
CVE-2026-107602HIGH7.5A flaw was found in the SAML 1.1 XML parsing logic of Keycloak, an open-source identity and access management solution. ...
CVE-2026-107123HIGH7.5A flaw was found in the SAML XML processing component of Keycloak, an open-source identity and access management solutio...
CVE-2026-104867MEDIUM4.3Immich is a high-performance self-hosted photo and video management solution. From 3.0.0 until 3.2.0, the GET /api/admin...