CVE Vulnerability Database
Search and browse 420,189 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-121021 | MEDIUM | 5.5 | 0.1% | Nov 3, 2026 | Plaintext Storage of a Password (CWE-256) in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.... |
| CVE-2026-121020 | MEDIUM | 4.3 | 0.2% | Nov 3, 2026 | Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) in the security configuration API in AxxonSoft Axxo... |
| CVE-2026-118448 | MEDIUM | 6.9 | 0.1% | Nov 3, 2026 | A use of uninitialized memory vulnerability in the pybddisasm Python bindings affects nd_to_text. If the underlying text... |
| CVE-2026-118447 | MEDIUM | 4.8 | 0.1% | Nov 3, 2026 | A use of uninitialized memory vulnerability in the pybddisasm Python bindings may disclose process memory when instructi... |
| CVE-2026-118446 | MEDIUM | 6.9 | 0.1% | Nov 3, 2026 | A use-after-free vulnerability in the pybddisasm Python bindings affects array-valued members of INSTRUX objects, includ... |
| CVE-2026-118445 | MEDIUM | 6.9 | 0.1% | Nov 3, 2026 | A use-after-free vulnerability in the pybddisasm Python bindings affects structure-valued members of INSTRUX objects. Th... |
| CVE-2026-118444 | MEDIUM | 4.8 | 0.1% | Nov 3, 2026 | Out-of-bounds read vulnerabilities in the pybddisasm Python bindings may disclose adjacent process memory during instruc... |
| CVE-2026-115231 | HIGH | 8.5 | 0.1% | Nov 3, 2026 | In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a user-mode, memory-protected module pos... |
| CVE-2026-113421 | HIGH | 7.3 | 0.1% | Nov 3, 2026 | In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, ThreadX Modules does not revoke a module's trace-buffer-full cal... |
| CVE-2026-109161 | MEDIUM | 4.9 | 0.3% | Nov 3, 2026 | Insufficient bounds checking in the Digital I/O function may allow a remote attacker with high privileges to cause a den... |
| CVE-2026-105982 | HIGH | 7.2 | 0.5% | Nov 3, 2026 | Improper input validation in the IPsec VPN function may allow a remote attacker with high privileges to inject system co... |
| CVE-2026-105981 | HIGH | 7.2 | 0.4% | Nov 3, 2026 | Improper input validation in the Digital I/O function may allow a remote attacker with high privileges to inject operati... |
| CVE-2026-105980 | HIGH | 7.2 | 0.4% | Nov 3, 2026 | Improper input validation in the WireGuard VPN function may allow a remote attacker with high privileges to inject syste... |
| CVE-2026-105979 | HIGH | 7.2 | 0.4% | Nov 3, 2026 | Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system... |
| CVE-2026-105978 | HIGH | 7.2 | 0.4% | Nov 3, 2026 | Improper input validation in management control functions may allow a remote attacker with high privileges to inject ope... |
| CVE-2026-103327 | MEDIUM | 5.3 | 0.1% | Nov 3, 2026 | The CryptoCloud WordPress plugin from 3.0.0 through 3.0.1 does not verify the authenticity of the payment notifications ... |
| CVE-2026-74846 | HIGH | 7.5 | 0.3% | Nov 3, 2026 | Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq compar... |
| CVE-2026-4052 | CRITICAL | 9.8 | 0.4% | Nov 3, 2026 | This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sha... |
| CVE-2026-16900 | HIGH | 7.5 | 1.5% | Nov 3, 2026 | Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass i... |
| CVE-2026-13594 | CRITICAL | 9.1 | 1.1% | Nov 3, 2026 | Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that co... |
| CVE-2026-120988 | MEDIUM | 6.1 | 0.2% | Nov 3, 2026 | billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids ... |
| CVE-2026-103653 | MEDIUM | 6.7 | 0.3% | Nov 3, 2026 | An out-of-bounds read vulnerability in the Qt CoAP message parsing (QCoapInternalReply::createFromFrame()) of the Qt CoA... |
| CVE-2026-120987 | HIGH | 7.5 | 0.1% | Nov 3, 2026 | Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment. |
| CVE-2025-5769 | MEDIUM | 6.1 | 0.2% | Nov 3, 2026 | The authentication endpoint does not properly encode user-supplied input before rendering it within the web page. This l... |
| CVE-2025-1397 | MEDIUM | 4.8 | 0.2% | Nov 3, 2026 | When utilizing JWT Bearer or SAML2 Bearer grant types, the system fails to validate the status of the Identity Provider ... |