CVE Vulnerability Database
Search and browse 424,998 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-44038 | MEDIUM | 4.4 | — | Oct 8, 2026 | A global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries (dcmjpeg/libijg8, libijg12 and libi... |
| CVE-2026-44037 | MEDIUM | 5.5 | — | Oct 8, 2026 | Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::pa... |
| CVE-2026-44036 | MEDIUM | 5.5 | — | Oct 8, 2026 | Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XM... |
| CVE-2026-44035 | MEDIUM | 5.5 | — | Oct 8, 2026 | Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an a... |
| CVE-2026-44034 | MEDIUM | 4.4 | — | Oct 8, 2026 | A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame() in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 ... |
| CVE-2026-44033 | MEDIUM | 5.5 | — | Oct 8, 2026 | Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc... |
| CVE-2026-44031 | HIGH | 7.5 | — | Oct 8, 2026 | Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 all... |
| CVE-2026-19218 | CRITICAL | 9.1 | — | Oct 8, 2026 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer Import-Export Industry a... |
| CVE-2026-16340 | CRITICAL | 9.8 | 0.5% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-16182 | MEDIUM | 5.9 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, an... |
| CVE-2026-16181 | HIGH | 7.4 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-16179 | HIGH | 7.5 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-16178 | HIGH | 7.5 | 0.4% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-16177 | MEDIUM | 5.3 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-16176 | HIGH | 7.5 | 0.4% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-16170 | HIGH | 7.5 | 0.4% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-16169 | HIGH | 7.5 | 0.4% | Oct 8, 2026 | IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncont... |
| CVE-2026-14521 | MEDIUM | 4.9 | 0.1% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-106611 | HIGH | 7.1 | — | Oct 8, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This... |
| CVE-2026-106603 | MEDIUM | 6.5 | — | Oct 8, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Groundhogg HollerBox holler-box allows Exploiting Inco... |
| CVE-2026-106600 | MEDIUM | 5.3 | — | Oct 8, 2026 | Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Acces... |
| CVE-2026-106596 | MEDIUM | 5.3 | — | Oct 8, 2026 | Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Exploiting ... |
| CVE-2026-105893 | MEDIUM | 5.3 | — | Oct 8, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets all... |
| CVE-2026-105891 | MEDIUM | 4.3 | 0.2% | Oct 8, 2026 | Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly ... |
| CVE-2026-105890 | MEDIUM | 6.5 | — | Oct 8, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell... |