CVE.report
CVE.report is the most up-to-date database of common vulnerabilities and exposures. Information is pulled in from several sources and processed in to a mobile friendly, easy to use page. Use the site to quickly check for vulnerabilities in products such as operating systems, applications, hardware, networks, databases, browsers, e-mail clients and more.
CVEs provide a unique and common naming scheme for publicly known cyber security vulnerabilities in order to quickly identify and share these vulnerabilities. You can use the search below to look for vulnerabilities based on product, vendor, or common tags
The form you will see after following this link allows you to fill out the various variables in the CVSS scoring system and receive the corresponding score. The description of each of the variables is also included for additional information.
cve.report now provides a free read-only JSON API for CVE details. Each record combines the CVE Program JSON record, NVD enrichment, KEV, and EPSS when available.
Recent CVEs
| CVE | Description | Updated |
|---|---|---|
| CVE-2026-96806 json | The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but... | |
| CVE-2026-94135 json | The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, `SFTPClientPool`) disable SSH host-... | |
| CVE-2026-94134 json | The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or `no_ho... | |
| CVE-2026-92228 json | The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role global re... | |
| CVE-2026-111369 json | ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson routes th... | |
| CVE-2026-111368 json | ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API course submission routes... | |
| CVE-2026-111367 json | BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge ... | |
| CVE-2026-111366 json | cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manag... | |
| CVE-2026-111365 json | cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read, mod... | |
| CVE-2026-111364 json | MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that allow... | |
| CVE-2026-111363 json | BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileg... | |
| CVE-2026-111359 json | CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefront use... | |
| CVE-2026-111358 json | SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows authenticated workspace m... | |
| CVE-2026-111356 json | MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated a... | |
| CVE-2026-111355 json | zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to ignore de... | |
| CVE-2026-111354 json | crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members... | |
| CVE-2026-111353 json | Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time ent... | |
| CVE-2026-111352 json | ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted ba... | |
| CVE-2026-111351 json | metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authe... | |
| CVE-2026-111350 json | Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authent... | |
| CVE-2026-111349 json | Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticat... | |
| CVE-2026-111348 json | Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php and AfterSaleLogic.php tha... | |
| CVE-2026-111347 json | go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted ... | |
| CVE-2026-111346 json | ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated users... | |
| CVE-2026-111345 json | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conv... | |
| CVE-2026-111344 json | APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node desc... | |
| CVE-2026-111343 json | pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated user... | |
| CVE-2026-111332 json | OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share a... | |
| CVE-2026-111331 json | Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authenticated o... | |
| CVE-2026-111330 json | JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as unsal... | |
| CVE-2026-111329 json | JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote atta... | |
| CVE-2026-111324 json | rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite ex... | |
| CVE-2026-111323 json | RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/ver... | |
| CVE-2026-111322 json | Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access ... | |
| CVE-2026-111321 json | TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the ... | |
| CVE-2026-111320 json | ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers t... | |
| CVE-2026-111313 json | JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that al... | |
| CVE-2026-111312 json | OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, ... | |
| CVE-2026-111284 json | Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows authenticated ... | |
| CVE-2026-111283 json | BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticat... | |
| CVE-2026-111282 json | Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthenticate... | |
| CVE-2026-111281 json | Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution vulnerability that allows... | |
| CVE-2026-111280 json | snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicious S7... | |
| CVE-2026-111279 json | Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exhaust ... | |
| CVE-2026-111278 json | NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protectio... | |
| CVE-2026-111277 json | NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows u... | |
| CVE-2026-111275 json | nifti_clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifti_convert_n2hdr2nim() becau... | |
| CVE-2026-111274 json | unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c due to an incorre... | |
| CVE-2026-111273 json | unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, reachable through... | |
| CVE-2026-111272 json | LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote() that allows attackers to read... | |
| CVE-2026-111271 json | libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.c... | |
| CVE-2026-111270 json | libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src/load_dsm.cpp because nPa... | |
| CVE-2026-111269 json | libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalue.c w... | |
| CVE-2026-110922 json | Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code insid... | |
| CVE-2026-110921 json | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the s... | |
| CVE-2026-110920 json | Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside th... | |
| CVE-2026-110919 json | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the s... | |
| CVE-2026-110918 json | Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML... | |
| CVE-2026-110917 json | Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML ... | |
| CVE-2026-110916 json | Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute... | |
| CVE-2026-110915 json | Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code ins... | |
| CVE-2026-110914 json | Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitra... | |
| CVE-2026-110913 json | Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside t... | |
| CVE-2026-0849 json | Malformed ATAES132A responses with an oversized length field overflow a 52-byte stack buffer in the Zephyr crypto driver, all... | |
| CVE-2024-58397 json | MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters() that allows attackers to read past hea... | |
| CVE-2024-14040 json | In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Increase weight to u16 In CLOS networks, ... | |
| CVE-2023-54318 json | In the Linux kernel, the following vulnerability has been resolved: net/smc: use smc_lgr_list.lock to protect smc_lgr_list.l... | |
| CVE-2023-54317 json | In the Linux kernel, the following vulnerability has been resolved: dm flakey: don't corrupt the zero page When we need to ... | |
| CVE-2023-54308 json | In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: Create card with device-managed snd_devm_c... | |
| CVE-2023-54306 json | In the Linux kernel, the following vulnerability has been resolved: net: tls: avoid hanging tasks on the tx_lock syzbot sen... | |
| CVE-2023-54292 json | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix data race on CQP request done KCSAN det... | |
| CVE-2023-54280 json | In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential race when tree connecting ipc Prote... | |
| CVE-2023-54269 json | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: double free xprt_ctxt while still in use When a... | |
| CVE-2023-54262 json | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't clone flow post action attributes secon... | |
| CVE-2023-54258 json | In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential oops in cifs_oplock_break With defe... | |
| CVE-2023-54254 json | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Don't leak a resource on eviction error On evi... | |
| CVE-2023-54243 json | In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix table blob use-after-free We a... | |
| CVE-2023-54238 json | In the Linux kernel, the following vulnerability has been resolved: mlx5: fix skb leak while fifo resync and push During pt... | |
| CVE-2023-54237 json | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix potential panic dues to unprotected smc_llc... | |
| CVE-2023-54234 json | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix missing mrioc->evtack_cmds initializat... | |
| CVE-2023-54227 json | In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix tags leak when shrink nr_hw_queues Although... | |
| CVE-2023-54223 json | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix invalid buffer access for legacy rq ... | |
| CVE-2023-54220 json | In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix oops for port->pm on uart_change_pm() ... | |
| CVE-2023-54214 json | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free This fi... | |
| CVE-2023-54210 json | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Avoid use-after-free in dbg for hci... | |
| CVE-2023-54206 json | In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: fix filter idr initialization The ci... | |
| CVE-2023-54202 json | In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix race condition UAF in i915_perf_add_config... | |
| CVE-2023-54200 json | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always release netdev hooks from n... | |
| CVE-2023-54198 json | In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in tty_driver_lookup_tty()... | |
| CVE-2023-54193 json | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: remove block_cb from driver_list bef... | |
| CVE-2023-54173 json | In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_event_output We received... | |
| CVE-2023-54168 json | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() ... | |
| CVE-2023-54164 json | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix iso_conn related locking and validit... | |
| CVE-2023-54156 json | In the Linux kernel, the following vulnerability has been resolved: sfc: fix crash when reading stats while NIC is resetting... | |
| CVE-2023-54128 json | In the Linux kernel, the following vulnerability has been resolved: fs: drop peer group ids under namespace lock When clean... | |
| CVE-2023-54120 json | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix race condition in hidp_session_thread Th... | |
| CVE-2023-54116 json | In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-generic: prohibit potential out-of-bounds acce... | |
| CVE-2023-54107 json | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: dropping parent refcount after pd_free_fn() ... | |
| CVE-2023-54098 json | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix gvt debugfs destroy When gvt debug fs... | |
| CVE-2023-54095 json | In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix notifiers being shared by PCI and VIO... |