CVE Vulnerability Database

Search and browse 425,002 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-106164HIGH7.3In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vuln...
CVE-2026-103371HIGH7.5Insertion of Sensitive Information into Log File in Apache Geode Web Management. This issue affects Apache Geode: fro...
CVE-2026-96335HIGH7.5Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Secur...
CVE-2026-56851HIGH7.5The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destinatio...
CVE-2026-107216HIGH7.5Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRA...
CVE-2026-107215HIGH7.5Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPar...
CVE-2026-107214HIGH7.5Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, the decryp...
CVE-2026-107213MEDIUM5.5Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.9.0 to 2.11.0, GetSlicers...
CVE-2026-107212HIGH7.5Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, Rows.Colum...
CVE-2026-107211MEDIUM5.5Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, separately...
CVE-2026-106067MEDIUM6.3A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buffer is allo...
CVE-2026-106066MEDIUM6.3A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_malloc() s...
CVE-2026-95606CRITICAL9.8Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. ...
CVE-2026-95605CRITICAL9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Program...
CVE-2026-95595HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fontsplugin Disabl...
CVE-2026-95534HIGH8.8Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Ad...
CVE-2026-94670HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms allo...
CVE-2026-94662HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements...
CVE-2026-92543HIGH7.6Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects ...
CVE-2026-92542MEDIUM6.9The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent ...
CVE-2026-76501CRITICAL9.8A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisc...
CVE-2026-76500CRITICAL9.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastruc...
CVE-2026-76499CRITICAL9.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastruc...
CVE-2026-76498CRITICAL9.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastruc...
CVE-2026-76488MEDIUM6.5A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could ...