CVE Vulnerability Database

Search and browse 420,094 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-95728HIGH7.1An arbitrary file write vulnerability exists in the Virtual Intranet Access (VIA) client. Successful exploitation could ...
CVE-2026-95727HIGH7.2A command injection vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated adm...
CVE-2026-95726HIGH7.5A buffer overflow vulnerability in HPE Networking VIA could allow an unauthenticated remote attacker to conduct a denial...
CVE-2026-95725HIGH7.8A command injection vulnerability exists in the VIA client for Linux. Successful exploitation could allow a low-privileg...
CVE-2026-95724HIGH8.1An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA). Successful expl...
CVE-2026-95723HIGH8.4A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access (VIA) client. Successf...
CVE-2026-95722HIGH8.8A local privilege escalation vulnerability has been discovered in the Virtual Intranet Access (VIA) client. Successful e...
CVE-2026-93325HIGH7.3Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside...
CVE-2026-88968HIGH7.7Claude Code is an agentic coding tool. Prior to 2.1.251, the Edit tool validates a target using pathname and symlink res...
CVE-2026-88066HIGH7.5Claude Desktop is Anthropic's desktop application for interacting with Claude. Prior to 1.8089.0, Claude Desktop on Wind...
CVE-2026-63502HIGH8.3Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Pri...
CVE-2026-63501HIGH7.5ag-psd is a JavaScript library for reading and writing Photoshop Document files. Prior to 31.0.3, readPsd() accepts a to...
CVE-2026-63500HIGH7.1Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Pri...
CVE-2026-63489HIGH7.6Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. In ...
CVE-2026-63482HIGH7.5Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Pri...
CVE-2026-63478MEDIUM5.3isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's tr...
CVE-2026-63476MEDIUM4.3isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git read...
CVE-2026-63475MEDIUM4.3isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git pers...
CVE-2026-63471CRITICAL9.3fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts an OpenAPI...
CVE-2026-63470CRITICAL9.3fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts Operation....
CVE-2026-63469CRITICAL9.3fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts an additio...
CVE-2026-63434MEDIUM4.3MyTube is a self-hosted downloader and player for several video websites. Prior to 1.10.6, when statisticsEnabled and st...
CVE-2026-63433MEDIUM6.8MyTube is a self-hosted downloader and player for several video websites. Prior to 1.10.6, shouldSkipCsrfProtection() in...
CVE-2026-63395HIGH8.8isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's gi...
CVE-2026-54161HIGH8.1Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU...