Browse 390,251+ CVEs from NVD & CNNVD with AI-powered analysis, AI-generated PoCs, KEV/EPSS tracking, and daily security intelligence. Filter by vendor, product, severity, or CWE.
| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-105228 | ISPSoft Out-of-Bounds Read Vulnerability | Deltaww | ISPSoft | High | 7.0 | 2026-10-16 01:27:56 | Deep Dive |
| CVE-2026-105227 | ISPSoft Out-of-Bounds Read Vulnerability | Deltaww | ISPSoft | High | 7.0 | 2026-10-16 01:27:28 | Deep Dive |
| CVE-2026-111389 | Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing Validation | frappe | hrms | High | 7.7 | 2026-10-16 01:17:58 | Deep Dive |
| CVE-2026-111388 | Frappe before 16.33.0 restrict_ip Allowlist Bypass via API Key, OAuth Authentication | frappe | frappe | Medium | 5.4 | 2026-10-16 01:17:57 | Deep Dive |
| CVE-2026-111387 | Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint | nezhahq | nezha | Medium | 6.5 | 2026-10-16 01:17:56 | Deep Dive |
| CVE-2026-111386 | Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfig | nezhahq | nezha | Medium | 4.3 | 2026-10-16 01:17:55 | Deep Dive |
| CVE-2026-111385 | Nezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer Tools | nezhahq | nezha | Medium | 4.8 | 2026-10-16 01:17:54 | Deep Dive |
| CVE-2026-111384 | Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocket | nezhahq | nezha | Medium | 6.5 | 2026-10-16 01:17:53 | Deep Dive |
| CVE-2026-111383 | Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocket | nezhahq | nezha | Medium | 6.5 | 2026-10-16 01:17:52 | Deep Dive |
| CVE-2026-111381 | FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser | FreeRDP | FreeRDP | High | 7.3 | 2026-10-16 01:17:51 | Deep Dive |
| CVE-2026-111382 | FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combine | FreeRDP | FreeRDP | High | 8.8 | 2026-10-16 01:17:51 | Deep Dive |
| CVE-2026-111380 | FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple Backends | FreeRDP | FreeRDP | High | 8.8 | 2026-10-16 01:17:48 | Deep Dive |
| CVE-2026-111379 | FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3 | FreeRDP | FreeRDP | High | 7.3 | 2026-10-16 01:17:47 | Deep Dive |
| CVE-2026-111378 | FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser | FreeRDP | FreeRDP | High | 7.5 | 2026-10-16 01:17:46 | Deep Dive |
| CVE-2026-111377 | FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassembly | FreeRDP | FreeRDP | Medium | 6.5 | 2026-10-16 01:17:45 | Deep Dive |
| CVE-2026-111376 | FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZE | FreeRDP | FreeRDP | Medium | 5.0 | 2026-10-16 01:17:44 | Deep Dive |
| CVE-2026-111375 | FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window Title | FreeRDP | FreeRDP | Medium | 4.8 | 2026-10-16 01:17:43 | Deep Dive |
| CVE-2026-111374 | FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequest | FreeRDP | FreeRDP | Medium | 5.3 | 2026-10-16 01:17:42 | Deep Dive |
| CVE-2026-111373 | FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket Ping | FreeRDP | FreeRDP | Medium | 5.3 | 2026-10-16 01:17:40 | Deep Dive |
| CVE-2026-111237 | Ultralytics FastSAM AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection | Ultralytics | FastSAM | Medium | 5.3 | 2026-10-16 01:00:19 | Deep Dive |