CVE Vulnerability Database
Search and browse 420,152 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-121441 | LOW | 3.7 | — | Nov 3, 2026 | Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0.4 contains a request smuggling vulnerability in wa... |
| CVE-2026-121440 | LOW | 3.7 | — | Nov 3, 2026 | Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 fails to check forwarded trailers against the WasiHttpHooks::is_f... |
| CVE-2026-121439 | MEDIUM | 5.3 | — | Nov 3, 2026 | Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 contains a response splitting vulnerability in wasi-http p3 that ... |
| CVE-2026-121438 | MEDIUM | 5.3 | 0.3% | Nov 3, 2026 | Mistune before 3.3.3 contains a denial of service vulnerability in InlineParser.parse_link that allows attackers to caus... |
| CVE-2026-121437 | HIGH | 7.5 | — | Nov 3, 2026 | Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU t... |
| CVE-2026-121436 | HIGH | 7.2 | — | Nov 3, 2026 | Froxlor from 2.3.8 before 2.3.15 contains an information disclosure vulnerability that allows administrators with custom... |
| CVE-2026-121435 | MEDIUM | 4.3 | — | Nov 3, 2026 | Froxlor before 2.3.15 contains an authorization bypass vulnerability that allows authenticated customers to create MySQL... |
| CVE-2026-121434 | MEDIUM | 5.4 | 0.2% | Nov 3, 2026 | Froxlor 2.3.0 before 2.3.15 contains a missing authorization check in the Certificates.add and Certificates.update API c... |
| CVE-2026-121433 | MEDIUM | 5.4 | — | Nov 3, 2026 | AzuraCast before 0.24.0 contains a stored CSV formula injection vulnerability that allows station users with Media permi... |
| CVE-2026-121432 | LOW | 3.5 | — | Nov 3, 2026 | AzuraCast before 0.24.0 contains a CRLF injection vulnerability that allows low-privilege station users to inject playli... |
| CVE-2026-121431 | MEDIUM | 5.3 | — | Nov 3, 2026 | AzuraCast before 0.24.0 contains a server-side request forgery vulnerability that allows station users with WebHooks per... |
| CVE-2026-121430 | MEDIUM | 5.4 | 0.1% | Nov 3, 2026 | AzuraCast before 0.24.0 contains a missing authorization vulnerability in the GET and POST /api/station/{station_id}/wav... |
| CVE-2026-121429 | HIGH | 8.8 | — | Nov 3, 2026 | AzuraCast through 0.23.8 contains a command injection vulnerability that allows station users with Profile permission to... |
| CVE-2026-121428 | HIGH | 8.8 | — | Nov 3, 2026 | AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to in... |
| CVE-2026-121427 | HIGH | 7.5 | — | Nov 3, 2026 | AzuraCast through 0.23.8 fails to remove frontend_config.custom_config in PUT /station/{id}/profile/edit for users lacki... |
| CVE-2026-121426 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that ends an angle-addr a... |
| CVE-2026-121425 | MEDIUM | 6.5 | — | Nov 3, 2026 | Nodemailer from 3.0.0 before 10.1.4 contains a parsing flaw in addressparser that ends an RFC 5322 group at a semicolon ... |
| CVE-2026-121424 | MEDIUM | 6.5 | — | Nov 3, 2026 | Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that allows remote attack... |
| CVE-2026-121423 | MEDIUM | 6.5 | — | Nov 3, 2026 | SurrealDB before 3.3.0 contains an unbounded recursion vulnerability that allows authenticated users to abort the surrea... |
| CVE-2026-121422 | MEDIUM | 4.1 | 0.2% | Nov 3, 2026 | SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability that allows database Owners to by... |
| CVE-2026-121421 | MEDIUM | 4.3 | — | Nov 3, 2026 | SurrealDB 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability in network-capability matching because... |
| CVE-2026-121420 | LOW | 3.3 | — | Nov 3, 2026 | SurrealDB from 3.2.0 before 3.3.0 contains a server-side request forgery vulnerability in the FilteringResolver is_priva... |
| CVE-2026-121419 | HIGH | 8.1 | — | Nov 3, 2026 | SurrealDB from 3.1.0 before 3.3.0 contains an improper authentication vulnerability where the MCP BoundSubject fingerpri... |
| CVE-2026-121418 | MEDIUM | 4.3 | 0.2% | Nov 3, 2026 | SurrealDB from 3.1.0 before 3.3.0 contains an incorrect authorization vulnerability that allows record users to infer re... |
| CVE-2026-121417 | HIGH | 7.8 | — | Nov 3, 2026 | SurrealDB before 3.3.0 contains a use-after-free vulnerability in surrealdb-core KV backends that pass borrowed transact... |