CVE Vulnerability Database
Search and browse 424,998 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-107290 | MEDIUM | 6.5 | 0.4% | Oct 8, 2026 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.... |
| CVE-2026-105436 | HIGH | 8.8 | 0.3% | Oct 8, 2026 | Deserialization of Untrusted Data vulnerability in MainWP MainWP Child mainwp-child allows Object Injection.This issue a... |
| CVE-2026-104078 | HIGH | 7.8 | 0.3% | Oct 8, 2026 | Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 Safe component that a... |
| CVE-2026-104077 | HIGH | 7.8 | 0.3% | Oct 8, 2026 | Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious M... |
| CVE-2026-95208 | — | — | 0.2% | Oct 8, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn b... |
| CVE-2026-19585 | MEDIUM | 5.3 | — | Oct 8, 2026 | HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal durin... |
| CVE-2026-107678 | MEDIUM | 4.7 | 0.1% | Oct 8, 2026 | FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption... |
| CVE-2026-107677 | MEDIUM | 4.7 | 0.1% | Oct 8, 2026 | FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an ... |
| CVE-2026-107676 | LOW | 3.3 | 0.1% | Oct 8, 2026 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leav... |
| CVE-2026-107675 | MEDIUM | 5.9 | 0.2% | Oct 8, 2026 | FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler th... |
| CVE-2026-107660 | MEDIUM | 4.8 | 0.1% | Oct 8, 2026 | FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls_open() of liba... |
| CVE-2026-107289 | MEDIUM | 6.8 | 0.3% | Oct 8, 2026 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.56.0 until 1.... |
| CVE-2026-107288 | LOW | 3.7 | 0.4% | Oct 8, 2026 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.... |
| CVE-2026-107287 | MEDIUM | 6.5 | 0.3% | Oct 8, 2026 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.... |
| CVE-2026-106177 | MEDIUM | 6.4 | — | Oct 8, 2026 | A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or... |
| CVE-2026-9209 | CRITICAL | 9.8 | — | Oct 8, 2026 | mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel h... |
| CVE-2026-95125 | MEDIUM | 6.5 | 0.2% | Oct 8, 2026 | libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A crafted SWF file with a ma... |
| CVE-2026-93034 | CRITICAL | 9.8 | — | Oct 8, 2026 | SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializin... |
| CVE-2026-93017 | HIGH | 7.7 | 0.4% | Oct 8, 2026 | The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core API ... |
| CVE-2026-14999 | HIGH | 7.5 | 0.2% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-14992 | CRITICAL | 9.8 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-14988 | CRITICAL | 9.8 | 0.2% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-14905 | HIGH | 8.2 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-14888 | CRITICAL | 9.8 | 0.4% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-14509 | MEDIUM | 5.9 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |