CVE Vulnerability Database
Search and browse 425,002 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-62252 | CRITICAL | 9.8 | 0.7% | Oct 7, 2026 | Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using in... |
| CVE-2026-62251 | HIGH | 8.1 | 0.3% | Oct 7, 2026 | Homer is open source telecom observability software. Prior to version 11.0.283, the `V4StatisticsQuery` handler passes t... |
| CVE-2026-62176 | CRITICAL | 9.1 | — | Oct 7, 2026 | PraisonAI is a multi-agent teams system. Prior to version 4.6.78, the `deploy/api.py` module generates Python server cod... |
| CVE-2026-20362 | HIGH | 7.2 | 0.5% | Oct 7, 2026 | A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker t... |
| CVE-2026-20328 | CRITICAL | 9.1 | 0.5% | Oct 7, 2026 | A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On... |
| CVE-2026-20321 | MEDIUM | 6.5 | 0.4% | Oct 7, 2026 | A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allo... |
| CVE-2026-20173 | MEDIUM | 5.8 | 0.4% | Oct 7, 2026 | A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, cau... |
| CVE-2026-20038 | MEDIUM | 5.8 | 0.3% | Oct 7, 2026 | A vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mod... |
| CVE-2026-20032 | MEDIUM | 4.4 | 0.1% | Oct 7, 2026 | A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low ... |
| CVE-2026-106557 | HIGH | 7.7 | 0.3% | Oct 7, 2026 | Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdoc... |
| CVE-2026-106065 | MEDIUM | 6.3 | 0.1% | Oct 7, 2026 | A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, b... |
| CVE-2026-101886 | MEDIUM | 4 | 0.1% | Oct 7, 2026 | Cisco Jabber for Android (com.cisco.im) before 15.3.1.311364 contains a path traversal vulnerability that allows a malic... |
| CVE-2026-92415 | MEDIUM | 5.3 | 0.3% | Oct 7, 2026 | — Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Davex client.... |
| CVE-2026-92414 | CRITICAL | 9.1 | 0.6% | Oct 7, 2026 | : Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches... |
| CVE-2026-33586 | MEDIUM | 6.3 | 0.1% | Oct 7, 2026 | Authenticated users are able to manipulate both the SMTP envelope “Envelope-from” and “From” fields when sending emails ... |
| CVE-2026-107278 | MEDIUM | 5.3 | — | Oct 7, 2026 | MISP contains a validation flaw in its object synchronization logic. When a MISP Object is created without a description... |
| CVE-2026-107276 | MEDIUM | 6.3 | — | Oct 7, 2026 | MISP contains a race condition in the email-based one-time password (OTP) login flow. When two HTTP requests carrying th... |
| CVE-2026-107273 | MEDIUM | 4.3 | — | Oct 7, 2026 | Gophish 0.11.0 through 0.12.1 contains a server-side request forgery vulnerability that allows authenticated low-privile... |
| CVE-2026-107272 | MEDIUM | 4.7 | — | Oct 7, 2026 | Gophish through 0.12.1 contains stored and reflected cross-site scripting vulnerabilities that allow attackers to inject... |
| CVE-2026-107271 | MEDIUM | 5.3 | — | Oct 7, 2026 | Gophish through 0.12.1 contains a rate limit bypass vulnerability that allows unauthenticated attackers to evade /login ... |
| CVE-2026-107270 | HIGH | 7.1 | — | Oct 7, 2026 | Gophish through 0.12.1 contains an insecure direct object reference vulnerability that allows authenticated users to tak... |
| CVE-2026-107269 | LOW | 3.7 | 0.2% | Oct 7, 2026 | Gophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows unauthenticated atta... |
| CVE-2026-107210 | MEDIUM | 5.3 | 0.3% | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9... |
| CVE-2026-107209 | HIGH | 7.5 | 0.3% | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9... |
| CVE-2026-107208 | MEDIUM | 5.3 | 0.3% | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9... |