CVE.report
CVE.report is the most up-to-date database of common vulnerabilities and exposures. Information is pulled in from several sources and processed in to a mobile friendly, easy to use page. Use the site to quickly check for vulnerabilities in products such as operating systems, applications, hardware, networks, databases, browsers, e-mail clients and more.
CVEs provide a unique and common naming scheme for publicly known cyber security vulnerabilities in order to quickly identify and share these vulnerabilities. You can use the search below to look for vulnerabilities based on product, vendor, or common tags
The form you will see after following this link allows you to fill out the various variables in the CVSS scoring system and receive the corresponding score. The description of each of the variables is also included for additional information.
cve.report now provides a free read-only JSON API for CVE details. Each record combines the CVE Program JSON record, NVD enrichment, KEV, and EPSS when available.
Recent CVEs
| CVE | Description | Updated |
|---|---|---|
| CVE-2026-91299 json | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Secur... | |
| CVE-2017-20266 json | Joomla SP Movie Database 1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitra... | |
| CVE-2026-91314 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Support... | |
| CVE-2026-91312 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Support... | |
| CVE-2026-91311 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Support... | |
| CVE-2026-91310 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC). Supported ve... | |
| CVE-2026-91309 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supporte... | |
| CVE-2026-91308 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Support... | |
| CVE-2026-91307 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Support... | |
| CVE-2026-91306 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Support... | |
| CVE-2026-91305 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Support... | |
| CVE-2026-91304 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Support... | |
| CVE-2026-91303 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Support... | |
| CVE-2026-91302 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). ... | |
| CVE-2026-91301 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).... | |
| CVE-2026-91300 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported ver... | |
| CVE-2026-91298 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported ver... | |
| CVE-2026-91297 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).... | |
| CVE-2026-91296 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). ... | |
| CVE-2026-91295 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). ... | |
| CVE-2026-91294 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supp... | |
| CVE-2026-112685 json | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS G... | |
| CVE-2026-84494 json | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, ma... | |
| CVE-2026-84493 json | An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iO... | |
| CVE-2026-65385 json | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2... | |
| CVE-2026-43736 json | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Tahoe... | |
| CVE-2026-115506 json | libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerate... | |
| CVE-2026-112658 json | This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 2... | |
| CVE-2026-112618 json | An access issue was addressed with improved access restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, visionOS 27... | |
| CVE-2026-112506 json | A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2. An app may be able... | |
| CVE-2026-93848 json | Mattermost versions 11.7.x <= 11.7.10 fail to apply outbound internal-connection filtering to the OpenID discovery endpoint r... | |
| CVE-2026-93847 json | Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and publicat... | |
| CVE-2026-13411 json | Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an... | |
| CVE-2026-91315 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Support... | |
| CVE-2026-91313 json | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Support... | |
| CVE-2026-120630 json | CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTTP client, which both miss malicious content in URLs by ... | |
| CVE-2026-120627 json | The Private Internet Access Extension for Firefox contains an unguarded onAuthRequired authentication handler, leading to lea... | |
| CVE-2026-120416 json | A security vulnerability has been detected in AndyFactory newspaper4k up to 0.9.6. This affects the function Article.parse of... | |
| CVE-2026-119085 json | Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineeri... | |
| CVE-2026-120596 json | A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the Nut/Net TCP/IP stack included ... | |
| CVE-2026-120489 json | Outline before 1.12.0 contains an incorrect authorization vulnerability in authorizeDocumentPublish() that allows authenticat... | |
| CVE-2026-120460 json | Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to manage ... | |
| CVE-2026-120456 json | L-SMASH through 2.14.5 contains a heap out-of-bounds write vulnerability in isom_read_hdlr() and isom_read_dref_entry() in co... | |
| CVE-2026-120452 json | libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allows ma... | |
| CVE-2026-120448 json | DoraCMS through 3.1.0 contains a mass assignment vulnerability in the PUT /api/v1/user/api-keys/:id endpoint that allows auth... | |
| CVE-2026-119301 json | Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component in AWS SDK for... | |
| CVE-2026-117068 json | An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated rem... | |
| CVE-2026-117067 json | An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an una... | |
| CVE-2026-111048 json | FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.9, the admin/support/note_create e... | |
| CVE-2026-106808 json | OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM Nudm_UEAU Generate A... | |
| CVE-2026-106806 json | A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header names cause previously allocated... | |
| CVE-2026-77881 json | Control Web Panel (CWP) before webpanel_version 1.30 contains a blind SQL injection vulnerability in an unauthenticated loopb... | |
| CVE-2026-77877 json | Control Web Panel (CWP) before webpanel_version 1.30 contains a missing authentication vulnerability that allows attackers ab... | |
| CVE-2026-73696 json | Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user panel aut... | |
| CVE-2024-12139 json | The error handling implementation fails to properly sanitize or validate user-supplied input within URL parameters under spec... | |
| CVE-2026-120444 json | GoFound through 1.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to delete arbitrary direc... | |
| CVE-2026-120440 json | QuickJS-NG before 0.16.0 contains a memory leak vulnerability in js_atomics_store() in quickjs.c that fails to free the conve... | |
| CVE-2026-120436 json | Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that causes... | |
| CVE-2026-120432 json | Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam that allows attacke... | |
| CVE-2026-120428 json | PandaWiki 3.65.0 through 3.87.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to... | |
| CVE-2026-120348 json | A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function _get_tpl_conte... | |
| CVE-2026-120343 json | A flaw has been found in mathurvishal CloudClassroom-PHP-Project. The impacted element is an unknown function of the file man... | |
| CVE-2026-120339 json | A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project. This vulnerability affects unknown code of th... | |
| CVE-2026-120334 json | A flaw has been found in deepset-ai farm up to 0.8.0. This impacts the function EmbeddingTokenizer.from_pretrained of the fil... | |
| CVE-2026-120322 json | A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some unknown processing of the file /plug... | |
| CVE-2026-120318 json | Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorization vu... | |
| CVE-2026-120316 json | http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allows una... | |
| CVE-2026-120312 json | Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling th... | |
| CVE-2026-120282 json | A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp.... | |
| CVE-2026-120278 json | A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0. Impacted is the function sub_416d48/sub_41a7c0 of the file ... | |
| CVE-2026-120274 json | A vulnerability was identified in beecue FastBee up to 2.1.0. Affected by this issue is some unknown functionality of the fil... | |
| CVE-2026-120239 json | A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the file ... | |
| CVE-2026-120235 json | A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.58. Affected is the function parseSSEStream of t... | |
| CVE-2026-120231 json | A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of the fil... | |
| CVE-2026-94349 json | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Co... | |
| CVE-2026-91909 json | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ... | |
| CVE-2026-120252 json | imagecodecs 2023.1.23 through 2026.10.10 contains a stack-based buffer overflow vulnerability in the lossless JPEG Define Huf... | |
| CVE-2026-120248 json | Thelia before 3.1.1 contains a stored cross-site scripting vulnerability that allows authenticated back-office administrators... | |
| CVE-2026-120244 json | FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers to l... | |
| CVE-2026-120227 json | A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the file static_ro... | |
| CVE-2026-120223 json | A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function session_get of the file sessi... | |
| CVE-2026-120208 json | libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in unc_decoder_mixed_interleave::processTile... | |
| CVE-2026-120204 json | DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote a... | |
| CVE-2026-120200 json | Nexterm through 1.2.2-BETA contains a missing authorization vulnerability that allows authenticated users to hibernate, resum... | |
| CVE-2026-120197 json | A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi... | |
| CVE-2026-120194 json | A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a... | |
| CVE-2026-120191 json | A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the co... | |
| CVE-2026-119980 json | The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerable ... | |
| CVE-2026-119096 json | The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and includin... | |
| CVE-2026-109367 json | The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin for W... | |
| CVE-2026-89270 json | The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to autho... | |
| CVE-2026-117349 json | Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue. | |
| CVE-2026-116463 json | A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN_0062d96c of the component Bo... | |
| CVE-2026-115923 json | Backstage is an open framework for building developer portals. Prior to 3.9.2 and from 4.0.0 until 4.0.2, DefaultCatalogRules... | |
| CVE-2026-112637 json | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS... | |
| CVE-2026-109386 json | The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorization bypass in... | |
| CVE-2026-107051 json | Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrar... | |
| CVE-2026-107036 json | Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported ... | |
| CVE-2026-63398 json | Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, the SAML strategy's verify callback resolved th... | |
| CVE-2026-63396 json | Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, an unauthenticated actor can query `Query.allOr... |