CVE Vulnerability Database
Search and browse 419,298 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-88986 | MEDIUM | 6.1 | — | Nov 5, 2026 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.15.0, the... |
| CVE-2026-88985 | MEDIUM | 6.5 | — | Nov 5, 2026 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the... |
| CVE-2026-88983 | MEDIUM | 5 | — | Nov 5, 2026 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the... |
| CVE-2026-58273 | HIGH | 8.1 | — | Nov 5, 2026 | Rucio is a scientific data management framework. From 1.16.1 until 35.9.0, 38.6.0, and 41.0.0rc1, the /credentials/signu... |
| CVE-2026-33944 | HIGH | 8.8 | — | Nov 5, 2026 | Dolibarr is an open-source enterprise resource planning and customer relationship management application. Prior to 22.0.... |
| CVE-2026-122267 | HIGH | 8.8 | — | Nov 5, 2026 | MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting a presigne... |
| CVE-2026-119757 | CRITICAL | 9.8 | — | Nov 5, 2026 | BTCPay Server before 2.4.2, including 2.4.2 release candidates, contains an information disclosure vulnerability that al... |
| CVE-2026-112938 | MEDIUM | 5.8 | — | Nov 5, 2026 | filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, On POSIX platforms, StrictSoftFileLock... |
| CVE-2026-112913 | LOW | 3.3 | — | Nov 5, 2026 | filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock and AsyncReadWriteLock o... |
| CVE-2026-112910 | MEDIUM | 5.3 | — | Nov 5, 2026 | filelock is a platform-independent file lock for Python. From 3.10.0 until 4.2.1, filelock on Windows ignores the mode a... |
| CVE-2026-112908 | MEDIUM | 5.3 | — | Nov 5, 2026 | filelock is a platform-independent file lock for Python. From version 3.30.0 until version 4.2.1, StrictSoftFileLock a... |
| CVE-2026-112907 | LOW | 2.5 | — | Nov 5, 2026 | filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, soft lock classes on Windows read an e... |
| CVE-2026-111770 | HIGH | 7.7 | — | Nov 5, 2026 | The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Pro... |
| CVE-2026-111769 | MEDIUM | 6.5 | — | Nov 5, 2026 | The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Pro... |
| CVE-2026-111768 | HIGH | 7.5 | — | Nov 5, 2026 | The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Pro... |
| CVE-2026-111495 | MEDIUM | 5.1 | — | Nov 5, 2026 | API keys, credentials, and configuration parameters embedded in the MatchPoint APK, which can be extracted through rever... |
| CVE-2026-111494 | CRITICAL | 9.1 | — | Nov 5, 2026 | Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificat... |
| CVE-2026-111493 | HIGH | 8.7 | — | Nov 5, 2026 | Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint, which allows profile photos to be do... |
| CVE-2026-111492 | HIGH | 8.6 | — | Nov 5, 2026 | SQL injection in the push notification handler of the MatchPoint Android app, which processes messages from Firebase Clo... |
| CVE-2026-111491 | MEDIUM | 6.9 | — | Nov 5, 2026 | Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences. An att... |
| CVE-2026-111490 | CRITICAL | 9.9 | — | Nov 5, 2026 | Insecure direct object reference (IDOR) vulnerability in the MatchPoint API, which relies on the `actingasuser` HTTP hea... |
| CVE-2026-111489 | CRITICAL | 9.9 | — | Nov 5, 2026 | A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint plat... |
| CVE-2026-100395 | MEDIUM | 6.8 | — | Nov 5, 2026 | LXC is a userspace interface for the Linux kernel containment features used to create and manage system containers. In L... |
| CVE-2026-87008 | HIGH | 7.1 | — | Nov 5, 2026 | Code Graph RAG is an AI-powered knowledge graph and retrieval system for querying, understanding, and editing multi-lang... |
| CVE-2026-85076 | CRITICAL | 9 | — | Nov 5, 2026 | Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.124, an authenticated ... |