CVE Vulnerability Database
Search and browse 425,004 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-88514 | MEDIUM | 5.5 | — | Oct 7, 2026 | An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information. |
| CVE-2026-46572 | HIGH | 7.4 | 0.1% | Oct 7, 2026 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an att... |
| CVE-2026-46571 | MEDIUM | 5.5 | 0.1% | Oct 7, 2026 | In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an a... |
| CVE-2026-46569 | HIGH | 7.7 | 0.2% | Oct 7, 2026 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an ... |
| CVE-2026-46438 | MEDIUM | 6.5 | — | Oct 7, 2026 | wger is a free, open-source workout and fitness manager. Prior to version 2.6, an authenticated attacker can inject arbi... |
| CVE-2026-46437 | MEDIUM | 4.8 | 0.2% | Oct 7, 2026 | wger is a free, open-source workout and fitness manager. Versions prior to 2.6 have a vulnerability in the authenticatio... |
| CVE-2026-46434 | HIGH | 7.1 | — | Oct 7, 2026 | wger is a free, open-source workout and fitness manager. Prior to version 2.6, a user with only the `gym_trainer` permis... |
| CVE-2026-45161 | MEDIUM | 5.4 | — | Oct 7, 2026 | wger is a free, open-source workout and fitness manager. Prior to version 2.6, the `trainer_login` view in wger accepts ... |
| CVE-2026-43976 | HIGH | 7.1 | — | Oct 7, 2026 | wger is a free, open-source workout and fitness manager. Prior to version 2.6, five gym management views in wger apply a... |
| CVE-2026-42618 | HIGH | 7.1 | 0.1% | Oct 7, 2026 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to ... |
| CVE-2026-42617 | HIGH | 7.1 | 0.1% | Oct 7, 2026 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows an attacker to corru... |
| CVE-2026-42616 | HIGH | 7.8 | 0.2% | Oct 7, 2026 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap ... |
| CVE-2026-107194 | CRITICAL | 9.2 | 0.3% | Oct 7, 2026 | Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "login_type":"5" in a login ... |
| CVE-2026-107183 | HIGH | 8.1 | — | Oct 7, 2026 | llama.cpp before b11393 contains a use-after-free and double free vulnerability in common_chat_peg_mapper::map that allo... |
| CVE-2026-107181 | HIGH | 8.1 | 0.6% | Oct 7, 2026 | Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remo... |
| CVE-2026-102258 | MEDIUM | 6.1 | — | Oct 7, 2026 | Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Managem... |
| CVE-2026-102257 | HIGH | 7.2 | — | Oct 7, 2026 | A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extrac... |
| CVE-2026-98374 | HIGH | 8.8 | 0.2% | Oct 7, 2026 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmit_skb_hint in t... |
| CVE-2026-98373 | — | — | 0.2% | Oct 7, 2026 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when skip... |
| CVE-2026-42532 | MEDIUM | 5.5 | — | Oct 7, 2026 | A path traversal vulnerability exists in the EmailSheet extract_parts functionality of VisiData (version(s): dev (commit... |
| CVE-2026-41958 | MEDIUM | 6.5 | — | Oct 7, 2026 | A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version(s): dev... |
| CVE-2026-107180 | HIGH | 7.1 | — | Oct 7, 2026 | On MISP instances configured to require TOTP enrolment (Security.otp_required), the enforcement of the mandatory two-fac... |
| CVE-2026-107177 | MEDIUM | 5.9 | — | Oct 7, 2026 | Express Gateway through 1.16.11 contains a hardcoded cryptographic key vulnerability that allows attackers with datastor... |
| CVE-2026-107175 | MEDIUM | 5.3 | — | Oct 7, 2026 | MISP contains a defect in its event save workflow that prevents the correlation engine from recalculating correlations w... |
| CVE-2026-107170 | LOW | 2.9 | 0.1% | Oct 7, 2026 | A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer unini... |