CVE Vulnerability Database
Search and browse 389,905 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-46715 | MEDIUM | 5.3 | 0.3% | Jul 20, 2026 | Flask-Security-Too allows users to add security features to their Flask applicationa. Version 5.8.0's OAuth reauthentica... |
| CVE-2026-45295 | MEDIUM | 6.5 | 0.2% | Jul 20, 2026 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.219, the open tr... |
| CVE-2026-44228 | MEDIUM | 5.4 | 0.1% | Jul 20, 2026 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3, conta... |
| CVE-2026-44227 | MEDIUM | 6.1 | 0.2% | Jul 20, 2026 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contai... |
| CVE-2026-39878 | CRITICAL | 9.3 | 0.2% | Jul 20, 2026 | Chamilo LMS versions 1.11.38 and earlier contain a stored cross-site scripting vulnerability in the user registration fo... |
| CVE-2026-34239 | HIGH | 7.5 | 0.3% | Jul 20, 2026 | Chamilo version 1.11.40 and earlier are vulnerable to authenticated remote code execution in the main/inc/ajax/lang.ajax... |
| CVE-2026-26483 | MEDIUM | 6.1 | 0.2% | Jul 20, 2026 | Mettle SendPortal 3.0.1 and earlier contains a stored cross-site scripting (XSS) vulnerability in the template managemen... |
| CVE-2026-64207 | MEDIUM | 5.5 | 0.1% | Jul 20, 2026 | In the Linux kernel, the following vulnerability has been resolved: net/sched: dualpi2: fix GSO backlog accounting Whe... |
| CVE-2026-64206 | HIGH | 8.8 | 0.3% | Jul 20, 2026 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: cancel pending_rx_work before tak... |
| CVE-2026-64205 | MEDIUM | 5.5 | 0.1% | Jul 20, 2026 | In the Linux kernel, the following vulnerability has been resolved: i2c: i801: fix hardware state machine corruption in... |
| CVE-2026-64192 | MEDIUM | 5.5 | 0.1% | Jul 20, 2026 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if ... |
| CVE-2026-64191 | HIGH | 7.8 | 0.1% | Jul 20, 2026 | In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid ... |
| CVE-2026-64190 | MEDIUM | 5.5 | 0.1% | Jul 20, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in team_xmi... |
| CVE-2026-64189 | HIGH | 7.8 | 0.1% | Jul 20, 2026 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix race between dump and ip_set_... |
| CVE-2026-64188 | HIGH | 7.8 | 0.1% | Jul 20, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free i... |
| CVE-2026-64187 | MEDIUM | 5.5 | 0.1% | Jul 20, 2026 | In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no ... |
| CVE-2026-58484 | HIGH | 7.1 | 0.1% | Jul 20, 2026 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.listBackups()`... |
| CVE-2026-58482 | MEDIUM | 5.9 | 0.1% | Jul 20, 2026 | Network-AI, a TypeScript/Node.js multi-agent orchestrator, has a shipped, exported, documented feature called `ApprovalI... |
| CVE-2026-58481 | MEDIUM | 6.5 | 0.1% | Jul 20, 2026 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `AgentRuntime` promises scoped fil... |
| CVE-2026-58414 | MEDIUM | 5.5 | 0.1% | Jul 20, 2026 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.backup()` recu... |
| CVE-2026-58413 | MEDIUM | 6.1 | 0.1% | Jul 20, 2026 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.restore(env, b... |
| CVE-2026-55645 | MEDIUM | 6.5 | 0.5% | Jul 20, 2026 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of Client... |
| CVE-2026-55238 | MEDIUM | 5.3 | 0.5% | Jul 20, 2026 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Co... |
| CVE-2026-54538 | HIGH | 7.5 | 0.7% | Jul 20, 2026 | xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to pr... |
| CVE-2026-54051 | CRITICAL | 9.9 | 0.4% | Jul 20, 2026 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.9.1, the agent sandbox gates shell comma... |