CVE Vulnerability Database
Search and browse 420,189 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-99245 | — | — | — | Nov 3, 2026 | In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix key_reject_and_link() race with keyring r... |
| CVE-2026-99244 | — | — | — | Nov 3, 2026 | In the Linux kernel, the following vulnerability has been resolved: pid_namespace: prevent TIF_NOTIFY_SIGNAL from inter... |
| CVE-2026-99243 | — | — | 0.2% | Nov 3, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-114442 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Apache HertzBeat versions 1.7.1, 1.7.2, 1.7.3, 1.8.0, and 1.9.0 have incomplete XPath expression validation in the HTTP ... |
| CVE-2026-89293 | HIGH | 8.8 | 0.5% | Nov 3, 2026 | In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker t... |
| CVE-2026-89292 | CRITICAL | 9.2 | 0.5% | Nov 3, 2026 | In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker t... |
| CVE-2026-89229 | MEDIUM | 5.1 | 0.2% | Nov 3, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM ... |
| CVE-2026-77778 | HIGH | 7.1 | 0.8% | Nov 3, 2026 | ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to... |
| CVE-2026-77777 | HIGH | 7.1 | 0.7% | Nov 3, 2026 | ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authent... |
| CVE-2026-77691 | HIGH | 8.1 | 2.3% | Nov 3, 2026 | ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when conf... |
| CVE-2026-120333 | HIGH | 8.8 | 0.4% | Nov 3, 2026 | The actions linked in the emails of the extension (e.g. to confirm a registration or the deletion of an account) do not ... |
| CVE-2026-120332 | MEDIUM | 5.1 | 0.4% | Nov 3, 2026 | The HTML content of mails and tracked URLs are rendered unescaped in the backend module. Backend users with access to th... |
| CVE-2026-120331 | MEDIUM | 5.3 | 0.4% | Nov 3, 2026 | Content of external URL mails, their stylesheets and images to embed is fetched by the server without validating the tar... |
| CVE-2026-120330 | HIGH | 7.1 | 0.4% | Nov 3, 2026 | Backend actions and ajax routes of the mail module do not check whether the backend user has access to the page of the r... |
| CVE-2026-120329 | MEDIUM | 5.3 | 0.4% | Nov 3, 2026 | Saving the configuration of the mail backend module writes submitted settings to the page TSconfig without restricting t... |
| CVE-2026-120328 | MEDIUM | 6.9 | 0.6% | Nov 3, 2026 | The click tracking middleware does not validate the authentication code of a recipient if the code is omitted. Unauthent... |
| CVE-2026-120327 | MEDIUM | 5.3 | 0.4% | Nov 3, 2026 | The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the web... |
| CVE-2026-119843 | MEDIUM | 6.5 | — | Nov 3, 2026 | A flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not properly validate buffer sizes ... |
| CVE-2026-119724 | HIGH | 7.5 | 0.2% | Nov 3, 2026 | ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vul... |
| CVE-2026-119641 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | ** UNSUPPORTED WHEN ASSIGNED ** Improper input validation vulnerability in Apache Oozie. An authenticated Oozie user can... |
| CVE-2026-92610 | CRITICAL | 9.8 | 0.2% | Nov 3, 2026 | In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect Model loader resolves cross-file model references... |
| CVE-2026-91075 | MEDIUM | 5.3 | 0.1% | Nov 3, 2026 | The Eupago Gateway For Woocommerce WordPress plugin from 4.5.0 through 4.7.5 does not verify the authenticity of incomin... |
| CVE-2026-121024 | MEDIUM | 5.4 | 0.2% | Nov 3, 2026 | Incorrect Authorization (CWE-863) in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a... |
| CVE-2026-121023 | MEDIUM | 5.5 | 0.1% | Nov 3, 2026 | Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft AxxonNet before 3.25.... |
| CVE-2026-121022 | HIGH | 8.1 | 0.4% | Nov 3, 2026 | Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a r... |