CVE Vulnerability Database
Search and browse 419,275 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-87008 | HIGH | 7.1 | — | Nov 5, 2026 | Code Graph RAG is an AI-powered knowledge graph and retrieval system for querying, understanding, and editing multi-lang... |
| CVE-2026-85076 | CRITICAL | 9 | — | Nov 5, 2026 | Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.124, an authenticated ... |
| CVE-2026-81190 | MEDIUM | 6.9 | — | Nov 5, 2026 | KurrentDB is a database engineered for modern software applications and event-driven architectures. In version 26.1.0, a... |
| CVE-2026-77622 | HIGH | 8.2 | — | Nov 5, 2026 | Sliver is a command and control framework. Prior to 1.7.6, an HTTP(S) listener using the PNG encoder accepts attacker-co... |
| CVE-2026-77463 | MEDIUM | 6.5 | — | Nov 5, 2026 | Remark42 is a self-hosted comment engine for blogs, articles, or any other place where readers can add comments. From 1.... |
| CVE-2026-69143 | — | — | — | Nov 5, 2026 | Rejected reason: This CVE is a duplicate of another CVE. |
| CVE-2026-62268 | MEDIUM | 5.3 | — | Nov 5, 2026 | borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. Prior to 1.4.5 and 2.... |
| CVE-2026-55458 | LOW | 2.9 | — | Nov 5, 2026 | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.5, the reverse proxy's finalizeResponse m... |
| CVE-2026-54442 | MEDIUM | 4.8 | — | Nov 5, 2026 | Emissary is a P2P based data-driven workflow engine. Prior to 8.51.0, the VALID_LINK validation in src/main/java/emissar... |
| CVE-2026-49272 | HIGH | 8.5 | — | Nov 5, 2026 | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC... |
| CVE-2026-48705 | CRITICAL | 9.3 | — | Nov 5, 2026 | MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. Prior to 1.6.1, PydicomReader._get_affine(... |
| CVE-2026-46350 | CRITICAL | 9.1 | — | Nov 5, 2026 | dcmjs is a JavaScript implementation of DICOM manipulation. Prior to 0.52.0, the DecimalString and IntegerString impleme... |
| CVE-2026-34157 | HIGH | 7.6 | — | Nov 5, 2026 | Wails is a framework for building desktop applications using Go and web technologies. From 2.0.0 until 2.13.0, BindingsA... |
| CVE-2026-119434 | MEDIUM | 6.2 | — | Nov 5, 2026 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in silviucpp ezstd allows an attacker who... |
| CVE-2026-114604 | HIGH | 8.4 | — | Nov 5, 2026 | GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. From 10.10.1 until 12.0.2, the @g... |
| CVE-2026-114134 | HIGH | 8.7 | — | Nov 5, 2026 | Black is the uncompromising Python code formatter. Prior to 26.10.1, the Black GitHub Action with use_pyproject: true ac... |
| CVE-2026-112902 | HIGH | 8.3 | — | Nov 5, 2026 | Pillow is a Python imaging library. In versions through 12.3.0, the libtiff TIFF encoder can pass arguments to TIFFSetF... |
| CVE-2026-112899 | MEDIUM | 6.3 | — | Nov 5, 2026 | Pillow is a Python imaging library. In versions 2.3.0 through 12.3.0, EPS rendering does not validate the scaled image d... |
| CVE-2026-111771 | MEDIUM | 6.8 | — | Nov 5, 2026 | The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Pro... |
| CVE-2026-111753 | MEDIUM | 5.9 | — | Nov 5, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-111062 | LOW | 2.3 | — | Nov 5, 2026 | russh is a Rust SSH client and server library. From version 0.34.0-beta.1 until version 0.64.0, its SSH server does not ... |
| CVE-2026-110802 | MEDIUM | 6.1 | — | Nov 5, 2026 | Altair is a GraphQL client for all platforms. From 7.2.4 until 8.5.8, packages/altair-iframe-sandbox/src/main.ts reads p... |
| CVE-2026-77604 | HIGH | 7.5 | — | Nov 5, 2026 | Code Graph RAG is an AI-powered knowledge graph and retrieval system for querying, understanding, and editing multi-lang... |
| CVE-2026-76580 | MEDIUM | 5.4 | — | Nov 5, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText OpenText ... |
| CVE-2026-76181 | MEDIUM | 6.6 | — | Nov 5, 2026 | LibreOffice includes a dBASE database driver, which reads dBASE tables and their .ndx index files when a folder of dBASE... |