CVE Vulnerability Database

Search and browse 425,024 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-106112HIGH7.5ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels...
CVE-2026-106111MEDIUM5.3ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty Z...
CVE-2026-106110HIGH7.5ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocates an undersized comp...
CVE-2026-106109MEDIUM4.1Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 1.0.0 until 3.3.0, @quasar/ap...
CVE-2026-106107HIGH8.3Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 3.3.0, several @quasar/ap...
CVE-2026-106106HIGH7.1Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/render-ssr-error ...
CVE-2026-106105HIGH8.4Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/ssl-certificate 2...
CVE-2026-106104HIGH8.7Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.23.3, Platform.parseSSR...
CVE-2026-106103HIGH7.1Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, ...
CVE-2026-101207HIGH8.8Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutraliz...
CVE-2025-45871HIGH8.1LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, al...
CVE-2026-95153MEDIUM4.9An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /a...
CVE-2026-95140HIGH7.5kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, cr...
CVE-2026-106219HIGH7.5In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the...
CVE-2026-106218CRITICAL10In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible
CVE-2026-106102CRITICAL10Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getH...
CVE-2026-106101LOW3.1Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.32.2, the openURL() uti...
CVE-2026-106100HIGH7.1Payload is a free and open source headless content management system. In @payloadcms/db-mongodb versions before 3.87.0 a...
CVE-2026-105957MEDIUM6.3A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown func...
CVE-2026-105868HIGH7.1Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions befo...
CVE-2026-105867MEDIUM6.5Payload is a free and open source headless content management system. In @payloadcms/storage-s3 versions before 3.90.0 a...
CVE-2026-105866HIGH7.5Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions befo...
CVE-2026-105865HIGH8.1Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions befo...
CVE-2026-105864MEDIUM4.3Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before...
CVE-2026-105863CRITICAL9.4Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custo...