CVE Vulnerability Database
Search and browse 425,024 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105794 | CRITICAL | 9.1 | — | Oct 6, 2026 | MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20, ... |
| CVE-2026-105793 | CRITICAL | 9.1 | — | Oct 6, 2026 | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the p... |
| CVE-2026-105792 | MEDIUM | 6.5 | — | Oct 6, 2026 | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /... |
| CVE-2026-105791 | HIGH | 7.5 | 0.6% | Oct 6, 2026 | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the r... |
| CVE-2026-104069 | HIGH | 7.2 | — | Oct 6, 2026 | HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport() where an uploaded ZIP ... |
| CVE-2025-8352 | MEDIUM | 6.9 | 0.3% | Oct 6, 2026 | Allocation of resources without limits or throttling vulnerability in ESET PROTECT On-Prem increased resource consumptio... |
| CVE-2026-91140 | CRITICAL | 9.6 | — | Oct 6, 2026 | An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autono... |
| CVE-2026-87975 | MEDIUM | 4.3 | — | Oct 6, 2026 | An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. `django.forms.models.BaseMo... |
| CVE-2026-87890 | MEDIUM | 5.3 | — | Oct 6, 2026 | An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. An incomplete fix for CVE-2... |
| CVE-2026-85523 | HIGH | 8.8 | — | Oct 6, 2026 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Felisify Inf... |
| CVE-2026-84429 | MEDIUM | 5.3 | — | Oct 6, 2026 | An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. `django.utils.http.parse_he... |
| CVE-2026-82924 | MEDIUM | 5.3 | — | Oct 6, 2026 | Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co.... |
| CVE-2026-77178 | CRITICAL | 9.1 | — | Oct 6, 2026 | Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNo... |
| CVE-2026-77050 | MEDIUM | 5.3 | — | Oct 6, 2026 | An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. `django.utils.translation.g... |
| CVE-2026-34498 | MEDIUM | 5.1 | — | Oct 6, 2026 | Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command I... |
| CVE-2026-12380 | MEDIUM | 6.1 | — | Oct 6, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akıllı Ticaret Sof... |
| CVE-2026-106041 | MEDIUM | 6.5 | — | Oct 6, 2026 | Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated at... |
| CVE-2026-106040 | HIGH | 8.2 | — | Oct 6, 2026 | Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated at... |
| CVE-2026-106039 | MEDIUM | 6.5 | — | Oct 6, 2026 | Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated at... |
| CVE-2026-106038 | HIGH | 8.2 | 0.5% | Oct 6, 2026 | Mooncake Store master through 0.3.13.post1 contains a missing authentication vulnerability that allows unauthenticated a... |
| CVE-2026-106037 | CRITICAL | 9.8 | — | Oct 6, 2026 | Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST service, which binds to ... |
| CVE-2026-106026 | LOW | 3.7 | — | Oct 6, 2026 | tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewrite_string() in tftpd/remap.c that walks hea... |
| CVE-2026-105920 | HIGH | 7.3 | 0.3% | Oct 6, 2026 | A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2... |
| CVE-2026-105842 | MEDIUM | 6.4 | — | Oct 6, 2026 | lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader() of the lrz receive utility when ... |
| CVE-2026-105841 | HIGH | 7.5 | — | Oct 6, 2026 | lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows re... |