CVE Vulnerability Database
Search and browse 389,943 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-34150 | HIGH | 7.5 | 0.2% | Jul 17, 2026 | Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and abov... |
| CVE-2026-33754 | MEDIUM | 6.5 | 0.2% | Jul 17, 2026 | Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.9.0 and abov... |
| CVE-2026-33434 | HIGH | 7.1 | 0.2% | Jul 17, 2026 | Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.6.0 and abov... |
| CVE-2026-44453 | HIGH | 7.5 | 0.3% | Jul 16, 2026 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 6b5370d, h2o is vulnerable to a Deni... |
| CVE-2026-44452 | MEDIUM | 5.9 | 0.3% | Jul 16, 2026 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 8dc37cb, when h2o receives a ClientH... |
| CVE-2026-44436 | HIGH | 7.5 | 0.3% | Jul 16, 2026 | Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b... |
| CVE-2026-44435 | HIGH | 7.5 | 0.3% | Jul 16, 2026 | Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 93... |
| CVE-2026-44434 | MEDIUM | 5.3 | 0.1% | Jul 16, 2026 | Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit dc... |
| CVE-2026-44433 | HIGH | 7.5 | 0.2% | Jul 16, 2026 | Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b... |
| CVE-2026-44182 | CRITICAL | 10 | 0.3% | Jul 16, 2026 | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kuber... |
| CVE-2026-44181 | CRITICAL | 10 | 0.5% | Jul 16, 2026 | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kuber... |
| CVE-2026-43978 | HIGH | 8.1 | 0.2% | Jul 16, 2026 | wger is a free, open-source workout and fitness manager. In versions prior to 2.6, a gym trainer can escalate their sess... |
| CVE-2026-43977 | HIGH | 7.5 | 0.2% | Jul 16, 2026 | wger is a free, open-source workout and fitness manager. In versions prior to 2.6, any authenticated user can read anoth... |
| CVE-2026-15997 | LOW | 1.7 | 0.1% | Jul 16, 2026 | Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM allows Overflow Buffer... |
| CVE-2026-14253 | — | — | — | Jul 16, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-11740 | — | — | — | Jul 16, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-62826 | MEDIUM | 5.4 | 0.2% | Jul 16, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-59117 | HIGH | 7.5 | 0.4% | Jul 16, 2026 | Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58643 | MEDIUM | 6.1 | 0.2% | Jul 16, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an u... |
| CVE-2026-58598 | HIGH | 7 | 0.2% | Jul 16, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine all... |
| CVE-2026-57077 | HIGH | 7.7 | 0.2% | Jul 16, 2026 | YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len. In t... |
| CVE-2026-57076 | HIGH | 7.8 | 0.2% | Jul 16, 2026 | YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key i... |
| CVE-2026-57075 | CRITICAL | 9.1 | 0.2% | Jul 16, 2026 | YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64... |
| CVE-2026-53412 | CRITICAL | 9.8 | 0.6% | Jul 16, 2026 | Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Wind... |
| CVE-2026-53411 | HIGH | 7 | 0.1% | Jul 16, 2026 | A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Cl... |