CVE Vulnerability Database

Search and browse 425,002 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-107363MEDIUM6.1In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in subsequent requests to...
CVE-2026-107352HIGH7.7Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user...
CVE-2026-107229MEDIUM4The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT...
CVE-2026-107228MEDIUM6.8The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT...
CVE-2026-107227HIGH7.5The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT...
CVE-2026-97717MEDIUM6CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attacke...
CVE-2026-97716HIGH8.7CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. U...
CVE-2026-97715HIGH7.1CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Au...
CVE-2026-97714HIGH8.2CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60....
CVE-2026-34499HIGH8.5Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Ex...
CVE-2026-107355——Rejected reason: ** This candidate has been removed by an organization.
CVE-2026-107354——Rejected reason: ** This candidate has been removed by an organization.
CVE-2026-107353MEDIUM6.5traverse (npm) versions 0.3.6 through 0.3.9, 0.4.0 through 0.4.6, 0.5.0 through 0.5.2, and 0.6.0 through 0.6.11 allow pr...
CVE-2026-107176MEDIUM6.8A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config ...
CVE-2026-107161HIGH7.5A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin comp...
CVE-2026-107313MEDIUM4.2pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and 42.7.5 can send the previous contents of the GSS send buffer in ...
CVE-2026-107225MEDIUM6.5Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's...
CVE-2026-107224MEDIUM6.5Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, a Zip64 un...
CVE-2026-107223HIGH7.5Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, flatCols e...
CVE-2026-107222MEDIUM6.5Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 to 2.11.0, conditiona...
CVE-2026-107221MEDIUM6.5Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow s...
CVE-2026-107220MEDIUM6.5Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.1 to 2.11.0, mergeCells...
CVE-2026-107219HIGH7.5Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, agile decr...
CVE-2026-107218MEDIUM5.3Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.10.1 to 2.11.0, RIGHT val...
CVE-2026-107217HIGH7.5Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0 in github.c...