CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

4 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	Severity	Vendor / product	Summary	Published
CVE-2026-1524	9.8	critical	neo4j / neo4j	An edgecase in SSO implementation in Neo4j Enterprise edition versions prior to version 2026.02 can lead to unautho	178d ago
CVE-2026-14587	7.5	high	neo4j / neo4j	Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bi	31d ago
CVE-2026-1497	7.2	high	neo4j / neo4j	Incorrect resolving of namespaces in composite databases in Neo4j Enterprise edition prior to versions 2026.02 and	178d ago
CVE-2026-1471	6.5	medium	neo4j / neo4j	Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authen	178d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE) and CISA Known Exploited Vulnerabilities catalog (exploitation status). Both are United States government works in the public domain. Data refreshes daily; KEV hourly.

Loading

CVE Tracker