CVE Vulnerability Database
Search and browse 425,004 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-101331 | MEDIUM | 6.5 | 0.3% | Oct 7, 2026 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to... |
| CVE-2026-101329 | MEDIUM | 6.5 | 0.3% | Oct 7, 2026 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to... |
| CVE-2026-80048 | MEDIUM | 5.5 | 0.2% | Oct 7, 2026 | A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` UNIX socket can exploit this v... |
| CVE-2026-106583 | HIGH | 7.8 | 0.2% | Oct 7, 2026 | In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection. |
| CVE-2026-104335 | HIGH | 8.8 | 0.6% | Oct 7, 2026 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to impro... |
| CVE-2026-97626 | MEDIUM | 4.3 | 0.1% | Oct 6, 2026 | Requesting a user or organization profile page (`GET /{username}`) with an `Accept: application/rss+xml` or `Accept: app... |
| CVE-2026-97208 | MEDIUM | 4.9 | 0.3% | Oct 6, 2026 | The Gitea API endpoint for creating push mirrors (`POST /api/v1/repos/{owner}/{repo}/push_mirrors`) checked only whether... |
| CVE-2026-96594 | MEDIUM | 6.1 | 0.2% | Oct 6, 2026 | The Gitea API endpoint `GET /api/v1/repos/{owner}/{repo}/media/{filepath}` wrote files of up to 1 KiB that are stored di... |
| CVE-2026-89182 | MEDIUM | 5.4 | 0.2% | Oct 6, 2026 | With `[repository] FORCE_PRIVATE = true`, Gitea creates new repositories as private, but the post-receive hook still app... |
| CVE-2026-86684 | HIGH | 7.1 | 0.1% | Oct 6, 2026 | The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file syste... |
| CVE-2026-65142 | HIGH | 7.8 | 0.2% | Oct 6, 2026 | NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A success... |
| CVE-2026-65122 | MEDIUM | 5.5 | 0.1% | Oct 6, 2026 | NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this... |
| CVE-2026-106589 | LOW | 2.9 | 0.1% | Oct 6, 2026 | In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpected... |
| CVE-2026-106588 | LOW | 3.1 | 0.1% | Oct 6, 2026 | In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is ... |
| CVE-2026-106587 | LOW | 3.3 | 0.1% | Oct 6, 2026 | In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but w... |
| CVE-2026-106509 | HIGH | 8.8 | 0.3% | Oct 6, 2026 | Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node pack... |
| CVE-2026-106508 | MEDIUM | 6.5 | 0.3% | Oct 6, 2026 | Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node pack... |
| CVE-2026-106507 | MEDIUM | 6.5 | 0.3% | Oct 6, 2026 | Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node pack... |
| CVE-2026-106506 | MEDIUM | 5.3 | 0.2% | Oct 6, 2026 | Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend ... |
| CVE-2026-106505 | HIGH | 8.5 | 0.3% | Oct 6, 2026 | Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdoc... |
| CVE-2026-106504 | MEDIUM | 6.5 | 0.3% | Oct 6, 2026 | Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend ... |
| CVE-2026-106503 | HIGH | 8.1 | 0.4% | Oct 6, 2026 | Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/pl... |
| CVE-2026-106502 | MEDIUM | 5.3 | 0.3% | Oct 6, 2026 | Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend ... |
| CVE-2026-106501 | CRITICAL | 9.6 | 0.5% | Oct 6, 2026 | Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/pl... |
| CVE-2026-106500 | HIGH | 8.5 | 0.3% | Oct 6, 2026 | Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/pl... |