CVE.report
CVE.report is the most up-to-date database of common vulnerabilities and exposures. Information is pulled in from several sources and processed in to a mobile friendly, easy to use page. Use the site to quickly check for vulnerabilities in products such as operating systems, applications, hardware, networks, databases, browsers, e-mail clients and more.
CVEs provide a unique and common naming scheme for publicly known cyber security vulnerabilities in order to quickly identify and share these vulnerabilities. You can use the search below to look for vulnerabilities based on product, vendor, or common tags
The form you will see after following this link allows you to fill out the various variables in the CVSS scoring system and receive the corresponding score. The description of each of the variables is also included for additional information.
cve.report now provides a free read-only JSON API for CVE details. Each record combines the CVE Program JSON record, NVD enrichment, KEV, and EPSS when available.
Recent CVEs
| CVE | Description | Updated |
|---|---|---|
| CVE-2026-89096 json | A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated s... | |
| CVE-2026-111802 json | A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empt... | |
| CVE-2026-110759 json | Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a ... | |
| CVE-2026-110758 json | Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_... | |
| CVE-2026-110757 json | Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combin... | |
| CVE-2026-110756 json | Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes i... | |
| CVE-2026-110755 json | Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only in... | |
| CVE-2026-110754 json | Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline. getline collec... | |
| CVE-2026-110753 json | Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows ski... | |
| CVE-2026-110752 json | Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector ... | |
| CVE-2026-107346 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-89088 json | A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16... | |
| CVE-2026-89085 json | A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due t... | |
| CVE-2026-17591 json | A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a ... | |
| CVE-2026-110226 json | QloApps through 1.7.0 contains a broken access control vulnerability that allows hotel-restricted back-office employees to cr... | |
| CVE-2026-110221 json | QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the AdminHotelFeaturePricesSettings form tha... | |
| CVE-2026-110216 json | youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows any authenticated user to enable or dis... | |
| CVE-2026-110211 json | iFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authenticated user to permanen... | |
| CVE-2026-110206 json | Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that allows attackers to auto-... | |
| CVE-2026-110128 json | fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to retriev... | |
| CVE-2026-110123 json | Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to read ... | |
| CVE-2026-110118 json | WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authenticated users to complete or ... | |
| CVE-2026-110113 json | PublicCMS through V6.202608.a contains an insecure direct object reference vulnerability in the TradeAddressController tradeA... | |
| CVE-2026-110106 json | RuoYi-Vue-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to de... | |
| CVE-2026-110101 json | Koillection through 1.8.4 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML... | |
| CVE-2026-109607 json | A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/... | |
| CVE-2026-109429 json | Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary... | |
| CVE-2026-108381 json | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Pytho... | |
| CVE-2026-108376 json | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Pytho... | |
| CVE-2026-106549 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-100133 json | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject... | |
| CVE-2026-88833 json | A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet ... | |
| CVE-2026-85990 json | Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plu... | |
| CVE-2026-55562 json | Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Acti... | |
| CVE-2026-54086 json | SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path deco... | |
| CVE-2026-104126 json | JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts, JumpS... | |
| CVE-2026-102981 json | Plane is an open-source project management tool. Prior to 1.4.0, self-hosted Plane deployments allow unauthenticated GET requ... | |
| CVE-2026-54700 json | ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protocol par... | |
| CVE-2026-49264 json | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 0.6.1 until 4.0.0, OAuthLib's Revocati... | |
| CVE-2026-32316 json | jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvp_string_app... | |
| CVE-2026-111593 json | Rejected reason: This CVE ID was reserved for a reported issue in the PDF Invoices & Packing Slips for WooCommerce WordPress ... | |
| CVE-2026-107316 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-107172 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-106485 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-103910 json | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-101335. Reason: This candidate is a rese... | |
| CVE-2026-8311 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-5819 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-2937 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-109222 json | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All refere... | |
| CVE-2026-107913 json | Rejected reason: This CVE ID is a duplicate of CVE-2026-39749 and was never published. Both IDs were assigned to the same Bro... | |
| CVE-2026-106068 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-106006 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-105627 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-105151 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-105142 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-104922 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-104011 json | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-94257. Reason: This candidate is a reser... | |
| CVE-2026-88836 json | Rejected reason: Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentiona... | |
| CVE-2026-58462 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-108979 json | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All refere... | |
| CVE-2026-108749 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-104841 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-104758 json | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-73364. Reason: This candidate is a reser... | |
| CVE-2026-104710 json | Rejected reason: Duplicate of CVE-2026-71364, which was publicly disclosed and fixed in Red Hat Ansible Automation Platform o... | |
| CVE-2026-104703 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-103755 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-100197 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-68764 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-62181 json | Rejected reason: This CVE is a duplicate of another CVE. | |
| CVE-2026-18524 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-71149 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-68812 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-27569 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-24492 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-12780 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-12533 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-6010 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-5489 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-5102 json | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-35002 json | Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure. | |
| CVE-2025-35000 json | Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure. | |
| CVE-2025-34999 json | Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure. | |
| CVE-2025-34997 json | Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure. | |
| CVE-2025-34992 json | Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure. | |
| CVE-2025-34991 json | Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure. | |
| CVE-2025-34990 json | Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure. | |
| CVE-2025-34989 json | Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure. | |
| CVE-2026-111044 json | Sunshine is a self-hosted game stream host for Moonlight. From 2026.329.165800 until 2026.906.222525, Sunshine accepted any c... | |
| CVE-2026-108372 json | Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering. From versi... | |
| CVE-2026-96628 json | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.11.0, AuthMiddleware.manager... | |
| CVE-2026-96627 json | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.6.0, UpdateUser in backend/a... | |
| CVE-2026-96626 json | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0, UpdateRegistry and Test... | |
| CVE-2026-68498 json | StreamReadConstraints.maxNameLength (default 50,000 characters) is intended to bound how much memory a single JSON Object pro... | |
| CVE-2026-62439 json | A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image d... | |
| CVE-2026-62438 json | A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory contents b... | |
| CVE-2026-49410 json | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow c... | |
| CVE-2026-111721 json | Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other warehou... | |
| CVE-2026-111716 json | Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employees to read and modify oth... | |
| CVE-2026-111711 json | Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's user_ok... | |
| CVE-2026-111706 json | 99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows una... |