CVE Vulnerability Database
Search and browse 389,918 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-58362 | HIGH | 8.8 | 0.4% | Jul 18, 2026 | SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary object in the signin and signup operati... |
| CVE-2024-58361 | HIGH | 7.1 | 0.2% | Jul 18, 2026 | SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code ... |
| CVE-2024-58359 | HIGH | 7.1 | 0.3% | Jul 18, 2026 | SurrealDB versions before 2.1.0 contain a denial of service vulnerability in the sorting mechanism when using ORDER BY r... |
| CVE-2024-58358 | MEDIUM | 6.9 | 0.3% | Jul 18, 2026 | SurrealDB versions before 2.1.0 contain a denial of service vulnerability in role conversion that allows privileged owne... |
| CVE-2024-58357 | HIGH | 7.1 | 0.3% | Jul 18, 2026 | SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::time() function that panics whe... |
| CVE-2024-58356 | MEDIUM | 6.3 | 0.3% | Jul 18, 2026 | SurrealDB before 2.1.4 silently fails to overwrite table definitions when the DEFINE TABLE ... OVERWRITE clause is used ... |
| CVE-2023-54366 | HIGH | 8.8 | 0.3% | Jul 18, 2026 | SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELE... |
| CVE-2026-9147 | HIGH | 7.8 | 0.2% | Jul 18, 2026 | uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and compiles it at runti... |
| CVE-2026-59173 | HIGH | 7.5 | 0.5% | Jul 18, 2026 | Uncontrolled Resource Consumption vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: fro... |
| CVE-2026-16158 | CRITICAL | 10 | 0.2% | Jul 18, 2026 | Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 build the internal URL cache key by conca... |
| CVE-2026-15631 | CRITICAL | 10 | 0.3% | Jul 18, 2026 | Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail to validate the resolved WebSocket desti... |
| CVE-2026-16097 | HIGH | 8.8 | 0.5% | Jul 18, 2026 | A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the function sub_42537C of the component Sch... |
| CVE-2026-16096 | HIGH | 8.8 | 0.4% | Jul 18, 2026 | A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the function sub_40BB50 of th... |
| CVE-2026-16095 | HIGH | 8.8 | 0.4% | Jul 18, 2026 | A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setup_conntr... |
| CVE-2026-16088 | MEDIUM | 4.7 | 0.3% | Jul 18, 2026 | A vulnerability was detected in halo-dev halo up to 2.24.2. Affected by this vulnerability is the function Download of t... |
| CVE-2026-16085 | MEDIUM | 5.3 | 0.1% | Jul 18, 2026 | A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. Affected is the function NewContextBuilder of... |
| CVE-2026-47871 | HIGH | 8.8 | 0.7% | Jul 18, 2026 | VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, au... |
| CVE-2026-47870 | HIGH | 8.8 | 0.3% | Jul 18, 2026 | VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authenticated user with network acce... |
| CVE-2026-47869 | HIGH | 8.8 | 0.4% | Jul 18, 2026 | VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authenticated user with network acc... |
| CVE-2026-47868 | HIGH | 7.8 | 0.1% | Jul 18, 2026 | VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with local access may be ... |
| CVE-2026-47867 | HIGH | 8.8 | 0.4% | Jul 18, 2026 | VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with network access may be abl... |
| CVE-2026-47866 | HIGH | 8.3 | 0.3% | Jul 18, 2026 | VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a l... |
| CVE-2026-47865 | CRITICAL | 9.8 | 0.9% | Jul 18, 2026 | VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be ab... |
| CVE-2026-16084 | HIGH | 7.3 | 0.4% | Jul 18, 2026 | A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function web_fetch of the file pkg/tools... |
| CVE-2026-16083 | MEDIUM | 5.5 | 0.4% | Jul 18, 2026 | A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This affects the function webhook.ParseRequest of th... |