CVE Vulnerability Database
Search and browse 425,058 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-104044 | MEDIUM | 6.2 | 0.1% | Oct 6, 2026 | A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggabl... |
| CVE-2026-104043 | MEDIUM | 5.5 | 0.1% | Oct 6, 2026 | A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigge... |
| CVE-2026-104042 | MEDIUM | 5.5 | 0.2% | Oct 6, 2026 | A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentica... |
| CVE-2026-104041 | MEDIUM | 5.5 | 0.1% | Oct 6, 2026 | A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the ... |
| CVE-2026-104040 | — | — | 0.1% | Oct 6, 2026 | Rejected reason: Red Hat Product Security has been notified that this CVE is a duplicated of CVE-2026-104047 |
| CVE-2026-104039 | MEDIUM | 5.5 | 0.1% | Oct 6, 2026 | A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication services.... |
| CVE-2026-92821 | MEDIUM | 6.8 | 0.3% | Oct 6, 2026 | A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LD... |
| CVE-2026-105472 | MEDIUM | 6.3 | 0.2% | Oct 6, 2026 | A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9... |
| CVE-2026-104038 | MEDIUM | 5.9 | 0.3% | Oct 6, 2026 | A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks a... |
| CVE-2026-104037 | MEDIUM | 5.5 | 0.1% | Oct 6, 2026 | A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid... |
| CVE-2026-104036 | MEDIUM | 5.8 | 0.1% | Oct 6, 2026 | A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry ... |
| CVE-2026-104035 | MEDIUM | 5.5 | 0.1% | Oct 6, 2026 | A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to cause a Den... |
| CVE-2026-104034 | MEDIUM | 4.7 | 0.1% | Oct 6, 2026 | A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager (KCM) responder durin... |
| CVE-2026-104033 | MEDIUM | 5.4 | 0.2% | Oct 6, 2026 | A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protoco... |
| CVE-2026-104032 | MEDIUM | 5.5 | 0.1% | Oct 6, 2026 | A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the aut... |
| CVE-2026-104031 | MEDIUM | 5.5 | 0.1% | Oct 6, 2026 | A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during succe... |
| CVE-2026-82989 | CRITICAL | 9.8 | 0.3% | Oct 6, 2026 | There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticat... |
| CVE-2026-82988 | HIGH | 7.5 | 0.3% | Oct 6, 2026 | There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, ... |
| CVE-2026-105786 | HIGH | 8.5 | 0.3% | Oct 6, 2026 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.1... |
| CVE-2026-105785 | MEDIUM | 4.8 | 0.2% | Oct 6, 2026 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Jopli... |
| CVE-2026-105784 | MEDIUM | 4.6 | — | Oct 6, 2026 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.1... |
| CVE-2026-105783 | HIGH | 8 | 0.1% | Oct 6, 2026 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.1... |
| CVE-2026-105782 | HIGH | 7.5 | 0.4% | Oct 6, 2026 | Scrapy is a high-level web crawling and scraping framework for Python. From 1.4.0 until 2.14.2, RefererMiddleware in scr... |
| CVE-2026-105764 | HIGH | 7.7 | 0.3% | Oct 6, 2026 | Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.4, an authenticated non-admin... |
| CVE-2026-105763 | CRITICAL | 9.6 | 0.3% | Oct 6, 2026 | Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 until 2.7.0, the /metadata GraphQ... |