CVE.report
CVE.report is the most up-to-date database of common vulnerabilities and exposures. Information is pulled in from several sources and processed in to a mobile friendly, easy to use page. Use the site to quickly check for vulnerabilities in products such as operating systems, applications, hardware, networks, databases, browsers, e-mail clients and more.
CVEs provide a unique and common naming scheme for publicly known cyber security vulnerabilities in order to quickly identify and share these vulnerabilities. You can use the search below to look for vulnerabilities based on product, vendor, or common tags
The form you will see after following this link allows you to fill out the various variables in the CVSS scoring system and receive the corresponding score. The description of each of the variables is also included for additional information.
cve.report now provides a free read-only JSON API for CVE details. Each record combines the CVE Program JSON record, NVD enrichment, KEV, and EPSS when available.
Recent CVEs
| CVE | Description | Updated |
|---|---|---|
| CVE-2026-96437 json | The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than the in-memory bo... | |
| CVE-2026-92558 json | The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator chara... | |
| CVE-2026-92545 json | The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname fro... | |
| CVE-2026-92443 json | The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Auth... | |
| CVE-2026-92442 json | The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a... | |
| CVE-2026-92441 json | Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Forwarded-Prefix ... | |
| CVE-2026-92439 json | The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for anothe... | |
| CVE-2026-91000 json | Missing authentication for critical function vulnerability in N-able N-central allows Privilege Escalation. This issue affec... | |
| CVE-2026-90834 json | The user-mode syscall verifiers for the 16-bit ("wide data") UART API in drivers/serial/uart_handlers.c validated the wrong d... | |
| CVE-2026-90833 json | The simulated EEPROM driver validated access ranges in eeprom_range_is_valid() (drivers/eeprom/eeprom_simulator.c) with a sin... | |
| CVE-2026-90832 json | bt_hci_le_per_adv_report_common() in subsys/bluetooth/host/scan.c handles the HCI_LE_Periodic_Advertising_Report (and _v2) ev... | |
| CVE-2026-89324 json | The Basel Post Types plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.18. ... | |
| CVE-2026-87042 json | The IEEE 1588 (PTP) port implementation in subsys/net/lib/ptp/port.c adopted the logMessageInterval field of a received Delay... | |
| CVE-2026-82391 json | The HTTP/2 front-end of the Zephyr HTTP server aliased connection receive state as a scratch output. In subsys/net/lib/http/h... | |
| CVE-2026-77685 json | The RFCOMM multiplexer control-channel handler in subsys/bluetooth/host/classic/rfcomm.c computed the echo length for a BT_RF... | |
| CVE-2026-67177 json | Chargemap contains a stored cross site scripting vulnerability. A remote, unauthenticated attacker could craft a payload in t... | |
| CVE-2026-67176 json | Chargemap contains an open redirect vulnerability in the authentication login endpoint. A remote, unauthenticated attacker co... | |
| CVE-2026-67175 json | Chargemap contains a stored cross-site scripting vulnerability that allows a remote, authenticated attacker to craft a malici... | |
| CVE-2026-126186 json | Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record object... | |
| CVE-2026-126129 json | The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, which may resul... | |
| CVE-2026-126123 json | BeeS Software Solutions ERP before 04 September 2026 allows any low-privileged user to navigate directly to the administrativ... | |
| CVE-2026-126085 json | Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record object... | |
| CVE-2026-125958 json | Download of code without integrity check vulnerability in N-able N-central allows Remote Code Inclusion. This issue affects ... | |
| CVE-2026-125883 json | Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Poisoning. This is... | |
| CVE-2026-125882 json | Relative path traversal vulnerability in N-able N-central allows Path Traversal. This issue affects N-central: before 26.4.1... | |
| CVE-2026-125881 json | Server-Side request forgery (SSRF) vulnerability in N-able N-central allows Server Side Request Forgery. This issue affects ... | |
| CVE-2026-125880 json | Improper neutralization of HTTP headers for scripting syntax vulnerability in N-able N-central allows Cross-Site Scripting (X... | |
| CVE-2026-125879 json | Incorrect privilege assignment vulnerability in N-able N-central allows Privilege Escalation. This issue affects N-central: ... | |
| CVE-2026-125878 json | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in N-able N-central allows... | |
| CVE-2026-125298 json | AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON Web T... | |
| CVE-2026-125297 json | AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 accepts unauthenticated requests via the management API '/bss/sys... | |
| CVE-2026-123341 json | Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is... | |
| CVE-2026-123267 json | CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vuln... | |
| CVE-2026-40670 json | Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging (SEV-SNP) ... | |
| CVE-2026-40669 json | An off-by-one error in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to c... | |
| CVE-2026-40668 json | Authentication bypass by spoofing in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to... | |
| CVE-2026-28249 json | Improper preservation of consistency between independent representations of shared state in AMD Secure Encrypted Virtualizati... | |
| CVE-2026-28248 json | Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hyp... | |
| CVE-2026-28247 json | Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (SEV) firmware c... | |
| CVE-2026-123262 json | CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in... | |
| CVE-2026-123261 json | CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in... | |
| CVE-2026-123260 json | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature byp... | |
| CVE-2026-123259 json | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privi... | |
| CVE-2026-123258 json | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this ... | |
| CVE-2026-123041 json | The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client from i... | |
| CVE-2026-122102 json | Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attac... | |
| CVE-2026-122101 json | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature byp... | |
| CVE-2026-122100 json | CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in... | |
| CVE-2026-122099 json | CAI Content Credentials is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypas... | |
| CVE-2026-122098 json | CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security featu... | |
| CVE-2026-122097 json | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application deni... | |
| CVE-2026-121913 json | Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privil... | |
| CVE-2026-121912 json | Adobe Connect is affected by a Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to ... | |
| CVE-2026-121910 json | Adobe Connect is affected by a Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a v... | |
| CVE-2026-121908 json | Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerab... | |
| CVE-2026-121906 json | Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability ... | |
| CVE-2026-121904 json | Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attac... | |
| CVE-2026-121902 json | Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerab... | |
| CVE-2026-121900 json | Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerab... | |
| CVE-2026-121898 json | Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerab... | |
| CVE-2026-121896 json | Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerab... | |
| CVE-2026-121894 json | Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerab... | |
| CVE-2026-121892 json | Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in ... | |
| CVE-2026-121890 json | Adobe Connect is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead t... | |
| CVE-2026-121889 json | Adobe Connect is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Ex... | |
| CVE-2026-121887 json | Adobe Connect is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result... | |
| CVE-2026-121356 json | Adobe Connect is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Ex... | |
| CVE-2026-121355 json | Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker ... | |
| CVE-2026-121354 json | Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability ... | |
| CVE-2026-121353 json | Adobe Connect is affected by an Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability that could result ... | |
| CVE-2026-121352 json | Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker ... | |
| CVE-2026-121351 json | Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability ... | |
| CVE-2026-121350 json | Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerab... | |
| CVE-2026-121349 json | Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability ... | |
| CVE-2026-119017 json | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code executio... | |
| CVE-2026-118484 json | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature byp... | |
| CVE-2026-118483 json | Dimension is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the cont... | |
| CVE-2026-118482 json | Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature by... | |
| CVE-2026-118481 json | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this ... | |
| CVE-2026-118480 json | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this ... | |
| CVE-2026-118479 json | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this ... | |
| CVE-2026-118478 json | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privi... | |
| CVE-2026-118197 json | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this ... | |
| CVE-2026-114372 json | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privi... | |
| CVE-2026-114371 json | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code executio... | |
| CVE-2026-126128 json | The Management API client in the Auth0 Node.js SDK improperly neutralizes path parameters, allowing a request and its attache... | |
| CVE-2026-120828 json | A replica-set database server node does not limit or reclaim internal wait records created while handling a client-supplied r... | |
| CVE-2026-120826 json | An authorization flaw in the aggregation and view-definition handling of sharded deployments may allow a user holding only ba... | |
| CVE-2026-113580 json | Adobe Experience Manager is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could... | |
| CVE-2026-113579 json | Adobe Experience Manager is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could... | |
| CVE-2026-113574 json | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application deni... | |
| CVE-2026-113573 json | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature byp... | |
| CVE-2026-113572 json | CAI Content Credentials is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could result in ... | |
| CVE-2026-107356 json | U.S. Geological Survey Area Species Management Research Program (ARMI) accepts any uploaded file and stores the file under '/... | |
| CVE-2026-105150 json | The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'text_... | |
| CVE-2025-62621 json | Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypas... | |
| CVE-2025-62620 json | Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buffer qu... | |
| CVE-2025-54508 json | Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow a pr... | |
| CVE-2025-54506 json | A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware could al... | |
| CVE-2025-54504 json | Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with... |