CVE Vulnerability Database
Search and browse 425,004 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-62179 | MEDIUM | 6.5 | — | Oct 7, 2026 | PraisonAI is a multi-agent teams system. In `praisonai-platform` prior to version 0.1.9, issue dependency deletion can b... |
| CVE-2026-46570 | HIGH | 8.1 | 0.1% | Oct 7, 2026 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an... |
| CVE-2026-107202 | CRITICAL | 9.1 | — | Oct 7, 2026 | A command injection vulnerability exists in the h-ui (version v0.0.25 and below) administrative API due to improper vali... |
| CVE-2026-107174 | MEDIUM | 6.4 | 0.3% | Oct 7, 2026 | A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic l... |
| CVE-2026-107169 | MEDIUM | 6.2 | 0.1% | Oct 7, 2026 | A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandl... |
| CVE-2026-107167 | MEDIUM | 6.2 | 0.1% | Oct 7, 2026 | A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition ... |
| CVE-2026-107125 | MEDIUM | 6.3 | — | Oct 7, 2026 | A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This m... |
| CVE-2026-106563 | MEDIUM | 6.5 | 0.2% | Oct 7, 2026 | Backstage is an open framework for building developer portals. Prior to 0.21.8, the @backstage/plugin-kubernetes-backend... |
| CVE-2026-106562 | MEDIUM | 4.3 | 0.2% | Oct 7, 2026 | Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.... |
| CVE-2026-106561 | MEDIUM | 5 | 0.2% | Oct 7, 2026 | Backstage is an open framework for building developer portals. Prior to 0.21.9, the @backstage/plugin-kubernetes-backend... |
| CVE-2026-106560 | MEDIUM | 6.5 | 0.3% | Oct 7, 2026 | Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend... |
| CVE-2026-106559 | MEDIUM | 6.5 | 0.3% | Oct 7, 2026 | Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend... |
| CVE-2026-106558 | HIGH | 8.8 | 0.5% | Oct 7, 2026 | Backstage is an open framework for building developer portals. Prior to 1.14.8, 1.15.6, and 2.0.1, the @backstage/plugin... |
| CVE-2026-106556 | HIGH | 7.7 | 0.3% | Oct 7, 2026 | Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node pack... |
| CVE-2026-106510 | HIGH | 7.7 | 0.4% | Oct 7, 2026 | Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node pack... |
| CVE-2026-106064 | MEDIUM | 6.3 | 0.1% | Oct 7, 2026 | A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image with very large width and height... |
| CVE-2026-104074 | MEDIUM | 5.3 | — | Oct 7, 2026 | Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to ... |
| CVE-2025-70522 | HIGH | 8.8 | 0.2% | Oct 7, 2026 | The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for ... |
| CVE-2025-70521 | CRITICAL | 9.8 | 0.4% | Oct 7, 2026 | The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied inp... |
| CVE-2025-70520 | CRITICAL | 9.8 | 0.5% | Oct 7, 2026 | The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions agai... |
| CVE-2025-70519 | MEDIUM | 6.1 | 0.2% | Oct 7, 2026 | The device log component of Fanvil x7a firmware version 2.6.0.1182 does not properly sanitize or encode reflected user s... |
| CVE-2025-70518 | CRITICAL | 10 | 0.6% | Oct 7, 2026 | The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied inp... |
| CVE-2025-70517 | HIGH | 8.8 | 0.2% | Oct 7, 2026 | The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for ... |
| CVE-2025-70516 | CRITICAL | 9.1 | 0.3% | Oct 7, 2026 | The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions agai... |
| CVE-2025-70515 | MEDIUM | 6.1 | 0.3% | Oct 7, 2026 | The device log component of Fanvil x7a firmware version 2.6.0.1182 does not properly sanitize or encode reflected user s... |