CVE Vulnerability Database
Search and browse 420,189 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-85035 | HIGH | 8.8 | — | Nov 3, 2026 | The can_add_rx_filter_msgq() system call installs a CAN RX filter whose callback (can_msgq_put() in drivers/can/can_comm... |
| CVE-2026-85034 | MEDIUM | 6.7 | — | Nov 3, 2026 | The Bluetooth host's GATT client passed the value of a received Handle Value Notification, Handle Value Indication or Mu... |
| CVE-2026-85033 | MEDIUM | 4.6 | — | Nov 3, 2026 | The AVRCP Target role in subsys/bluetooth/host/classic/avrcp.c keeps its vendor-dependent response transmit state in a p... |
| CVE-2026-85032 | MEDIUM | 4.8 | — | Nov 3, 2026 | The MCTP over USB device class in subsys/pmci/mctp/mctp_usb.c splits RX handling across two threads: the system workqueu... |
| CVE-2026-120572 | HIGH | 8.8 | — | Nov 3, 2026 | Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159.0.1... |
| CVE-2026-119742 | HIGH | 7.2 | — | Nov 3, 2026 | Nagios XI before 2026R2 contains an OS command injection vulnerability in the MIB upload feature where the install_mib()... |
| CVE-2026-119179 | HIGH | 7 | — | Nov 3, 2026 | A flaw in the connection management layer of the MongoDB Node.js driver can leave a pooled network connection in the poo... |
| CVE-2026-99270 | HIGH | 8.1 | 0.3% | Nov 3, 2026 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_handler(). W... |
| CVE-2026-76124 | HIGH | 8.8 | 0.4% | Nov 3, 2026 | The BuddyBoss App plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.2.... |
| CVE-2026-65160 | MEDIUM | 5.5 | — | Nov 3, 2026 | NVIDIA nvJPEG contains a vulnerability where an attacker could cause a divide-by-zero. A successful exploit of this vuln... |
| CVE-2026-121458 | MEDIUM | 6.5 | — | Nov 3, 2026 | Instatic before 0.0.21 contains a missing authorization vulnerability in its AI/MCP content read tools that allows low-p... |
| CVE-2026-108060 | MEDIUM | 5.1 | — | Nov 3, 2026 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient... |
| CVE-2026-108059 | MEDIUM | 5.1 | — | Nov 3, 2026 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient... |
| CVE-2026-108058 | MEDIUM | 5.1 | — | Nov 3, 2026 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient... |
| CVE-2026-108057 | MEDIUM | 5.1 | — | Nov 3, 2026 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient... |
| CVE-2026-108056 | MEDIUM | 5.1 | — | Nov 3, 2026 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient... |
| CVE-2026-108055 | MEDIUM | 5.1 | — | Nov 3, 2026 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient... |
| CVE-2026-108054 | MEDIUM | 5.1 | — | Nov 3, 2026 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient... |
| CVE-2026-108053 | MEDIUM | 5.1 | — | Nov 3, 2026 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient... |
| CVE-2026-108052 | MEDIUM | 5.1 | — | Nov 3, 2026 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient... |
| CVE-2026-108051 | MEDIUM | 5.1 | — | Nov 3, 2026 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient... |
| CVE-2026-108050 | MEDIUM | 5.1 | — | Nov 3, 2026 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient... |
| CVE-2026-108049 | MEDIUM | 5.1 | — | Nov 3, 2026 | Clickjacking vulnerability in the Alosuite web application. The affected login interface can be embedded in a web page c... |
| CVE-2026-108048 | MEDIUM | 6.9 | — | Nov 3, 2026 | Vulnerability due to a lack of request limits in Alosuite’s password recovery functionality. The ‘/Account/resetPwd’ end... |
| CVE-2026-108047 | HIGH | 8.6 | — | Nov 3, 2026 | Inadequate authorization vulnerability in Alosuite’s user invitation functionality. The ‘/Requests/userInvitation’ endpo... |