CVE Database

161468+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-106632
5.4 MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute …

Oct 13, 2026
CVE-2026-106631
5.4 MEDIUM

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into …

Oct 13, 2026
CVE-2026-106630
9.3 CRITICAL

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable …

Oct 13, 2026
CVE-2026-106629
9.3 CRITICAL

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable …

Oct 13, 2026
CVE-2026-106628
5.4 MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute …

Oct 13, 2026
CVE-2026-106626
9.1 CRITICAL

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. …

Oct 13, 2026
CVE-2026-105895
9.9 CRITICAL

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, …

Oct 13, 2026
CVE-2026-104585
9.8 CRITICAL

Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.

Oct 13, 2026
CVE-2026-104252
9.8 CRITICAL

Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action and dtid form …

Oct 13, 2026
CVE-2026-103855
5.5 MEDIUM

Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the …

Oct 13, 2026
CVE-2026-103854
7.8 HIGH

Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of …

Oct 13, 2026
CVE-2026-103853
5.5 MEDIUM

Dimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive …

Oct 13, 2026
CVE-2026-103852
5.5 MEDIUM

Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to …

Oct 13, 2026
CVE-2026-103851
7.8 HIGH

Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. …

Oct 13, 2026
CVE-2026-103850
5.5 MEDIUM

Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to …

Oct 13, 2026
CVE-2026-103848
9.9 CRITICAL

Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in …

Oct 13, 2026
CVE-2026-103847
8.6 HIGH

Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker …

Oct 13, 2026
CVE-2026-103846
8.6 HIGH

Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution in the context of …

Oct 13, 2026
CVE-2026-103845
8.6 HIGH

Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A …

Oct 13, 2026
CVE-2026-103844
7.8 HIGH

Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this …

Oct 13, 2026
CVE-2026-103843
7.8 HIGH

Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. …

Oct 13, 2026
CVE-2026-103842
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of …

Oct 13, 2026
CVE-2026-103841
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of …

Oct 13, 2026
CVE-2026-103840
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of …

Oct 13, 2026
CVE-2026-103839
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-103838
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-103837
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-103836
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-103835
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-103834
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-103833
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-103832
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-103830
7.8 HIGH

Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. …

Oct 13, 2026
CVE-2026-102855
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-102238
9.6 CRITICAL

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-102235
8.8 HIGH

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-102234
7.4 HIGH

Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Oct 13, 2026
CVE-2026-97844
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97843
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97842
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97841
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97840
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97839
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97838
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97837
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97836
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97835
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97834
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97833
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97832
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.