CVE.report
CVE.report is the most up-to-date database of common vulnerabilities and exposures. Information is pulled in from several sources and processed in to a mobile friendly, easy to use page. Use the site to quickly check for vulnerabilities in products such as operating systems, applications, hardware, networks, databases, browsers, e-mail clients and more.
CVEs provide a unique and common naming scheme for publicly known cyber security vulnerabilities in order to quickly identify and share these vulnerabilities. You can use the search below to look for vulnerabilities based on product, vendor, or common tags
The form you will see after following this link allows you to fill out the various variables in the CVSS scoring system and receive the corresponding score. The description of each of the variables is also included for additional information.
cve.report now provides a free read-only JSON API for CVE details. Each record combines the CVE Program JSON record, NVD enrichment, KEV, and EPSS when available.
Recent CVEs
| CVE | Description | Updated |
|---|---|---|
| CVE-2026-96521 json | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co... | |
| CVE-2026-95696 json | IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of ser... | |
| CVE-2026-95695 json | IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restr... | |
| CVE-2026-95641 json | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co... | |
| CVE-2026-95640 json | Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-servi... | |
| CVE-2026-95639 json | Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in th... | |
| CVE-2026-95638 json | Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in ... | |
| CVE-2026-95637 json | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co... | |
| CVE-2026-95636 json | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code executio... | |
| CVE-2026-95635 json | Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of ... | |
| CVE-2026-94520 json | Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network. | |
| CVE-2026-94512 json | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | |
| CVE-2026-93909 json | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability... | |
| CVE-2026-93905 json | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corru... | |
| CVE-2026-93895 json | IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypa... | |
| CVE-2026-90530 json | ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability... | |
| CVE-2026-88089 json | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. | |
| CVE-2026-88088 json | Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-88086 json | Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network. | |
| CVE-2026-88085 json | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-88084 json | Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a netwo... | |
| CVE-2026-88083 json | Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-88082 json | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-88081 json | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-85919 json | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-85888 json | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-85886 json | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | |
| CVE-2026-85876 json | Use after free in SQL Server allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-85473 json | The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an o... | |
| CVE-2026-83966 json | Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th... | |
| CVE-2026-83965 json | Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code executio... | |
| CVE-2026-83945 json | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | |
| CVE-2026-83661 json | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code executio... | |
| CVE-2026-79715 json | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on ... | |
| CVE-2026-78633 json | The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribute le... | |
| CVE-2026-78632 json | The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security p... | |
| CVE-2026-78628 json | The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerbero... | |
| CVE-2026-77816 json | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle atta... | |
| CVE-2026-76001 json | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low... | |
| CVE-2026-75996 json | ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service... | |
| CVE-2026-75995 json | ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the con... | |
| CVE-2026-75994 json | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the conte... | |
| CVE-2026-75748 json | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An at... | |
| CVE-2026-71385 json | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the conte... | |
| CVE-2026-70189 json | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. | |
| CVE-2026-68883 json | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. | |
| CVE-2026-67628 json | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-67626 json | Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network. | |
| CVE-2026-67625 json | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | |
| CVE-2026-65674 json | Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. | |
| CVE-2026-63171 json | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attacke... | |
| CVE-2026-108388 json | Indico is a feature-rich event management system. Indico 3.3.3 through 3.3.13 incorrectly uses the ambient web-session user i... | |
| CVE-2026-107371 json | When the authorize() method is called with a maxAge parameter, the auth0.js library does not validate the auth_time claim in ... | |
| CVE-2026-107370 json | When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates the aut... | |
| CVE-2026-107369 json | The auth0/nextjs-auth0 SDK validates that the returnTo parameter is a same-origin URL. The SDK then stores this value and, in... | |
| CVE-2026-63169 json | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users t... | |
| CVE-2026-63168 json | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attacke... | |
| CVE-2026-63157 json | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users t... | |
| CVE-2026-63156 json | Omnispace Agora Project before 26.10.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated at... | |
| CVE-2026-62840 json | Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally... | |
| CVE-2026-49950 json | Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execu... | |
| CVE-2026-34634 json | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Explo... | |
| CVE-2026-34633 json | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low... | |
| CVE-2026-19810 json | Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vu... | |
| CVE-2026-14909 json | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure vulnerability t... | |
| CVE-2026-14532 json | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version inf... | |
| CVE-2026-11713 json | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with... | |
| CVE-2026-106624 json | ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arb... | |
| CVE-2026-106623 json | ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory. An atta... | |
| CVE-2026-106622 json | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Explo... | |
| CVE-2026-106621 json | ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arb... | |
| CVE-2026-106620 json | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-priv... | |
| CVE-2026-106619 json | ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the con... | |
| CVE-2026-106618 json | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the conte... | |
| CVE-2026-106617 json | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the conte... | |
| CVE-2026-106616 json | ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to a... | |
| CVE-2026-106615 json | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the conte... | |
| CVE-2026-106614 json | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the conte... | |
| CVE-2026-106613 json | ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the con... | |
| CVE-2026-106612 json | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the conte... | |
| CVE-2026-106090 json | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the conte... | |
| CVE-2026-106089 json | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the conte... | |
| CVE-2026-105994 json | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-priv... | |
| CVE-2026-105903 json | ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arb... | |
| CVE-2026-105901 json | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the conte... | |
| CVE-2026-105900 json | ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. A... | |
| CVE-2026-105899 json | ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary cod... | |
| CVE-2026-105898 json | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the conte... | |
| CVE-2026-105897 json | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Explo... | |
| CVE-2026-105896 json | Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-servi... | |
| CVE-2026-105443 json | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an i... | |
| CVE-2026-105442 json | IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 Liber... | |
| CVE-2026-104587 json | blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability. The application uses text/te... | |
| CVE-2026-104348 json | Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in ... | |
| CVE-2026-104347 json | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co... | |
| CVE-2026-104346 json | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co... | |
| CVE-2026-103829 json | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-... | |
| CVE-2026-103828 json | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-... | |
| CVE-2026-103827 json | Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-... | |
| CVE-2026-103826 json | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-... |