CVE Vulnerability Database
Search and browse 420,214 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111464 | MEDIUM | 5.9 | — | Nov 3, 2026 | The WP Fastest Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inc... |
| CVE-2026-76955 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could a... |
| CVE-2026-120831 | MEDIUM | 6.5 | 0.3% | Nov 3, 2026 | A flaw was found in libslirp in if_output(). When moving a session from the fast queue to the batch queue, the code unli... |
| CVE-2026-107441 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 cou... |
| CVE-2026-120833 | HIGH | 7.8 | 0.1% | Nov 3, 2026 | labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read() and read_relational() that p... |
| CVE-2026-105770 | MEDIUM | 5.3 | 0.3% | Nov 3, 2026 | Octo STS (github.com/octo-sts/app) before 0.11.2 returns trust policy configuration to callers whose OIDC token does not... |
| CVE-2026-120830 | HIGH | 7.4 | 0.2% | Nov 3, 2026 | A flaw was found in libslirp in icmp_forward_error(). When building an ICMP error response, the length of the quoted ori... |
| CVE-2026-71450 | HIGH | 8.7 | 0.3% | Nov 2, 2026 | Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Con... |
| CVE-2026-120752 | HIGH | 7.5 | 0.4% | Nov 2, 2026 | PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JM_set_annot_callout_line() that copie... |
| CVE-2026-120597 | MEDIUM | 4.3 | 0.3% | Nov 2, 2026 | A vulnerability was identified in Welcart e-Commerce Plugin up to 2.12.6 on WordPress. This affects the function ESCOTT_... |
| CVE-2026-111565 | — | — | — | Nov 2, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-86596 | CRITICAL | 9.8 | — | Nov 2, 2026 | The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, <= 260927... |
| CVE-2026-120740 | LOW | 2 | 0.2% | Nov 2, 2026 | A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-o... |
| CVE-2026-120091 | HIGH | 8.7 | 0.5% | Nov 2, 2026 | Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-workers, into its Worker Servic... |
| CVE-2026-116635 | MEDIUM | 6.1 | 0.3% | Nov 2, 2026 | Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP... |
| CVE-2026-115403 | HIGH | 8.2 | 0.3% | Nov 2, 2026 | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, built with BSD raw socket and IPv6 support, the IPv6 raw... |
| CVE-2026-115215 | HIGH | 8.7 | 0.4% | Nov 2, 2026 | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the NetX Secure DTLS server allocates a session from its... |
| CVE-2026-58977 | MEDIUM | 6.7 | 0.1% | Nov 2, 2026 | In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This co... |
| CVE-2026-58930 | HIGH | 7.8 | 0.1% | Nov 2, 2026 | An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when r... |
| CVE-2026-58927 | MEDIUM | 6.7 | 0.2% | Nov 2, 2026 | The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::wea... |
| CVE-2026-58926 | LOW | 2.5 | 0.1% | Nov 2, 2026 | A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t` whi... |
| CVE-2026-58925 | HIGH | 7.8 | 0.1% | Nov 2, 2026 | The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL se... |
| CVE-2026-58924 | HIGH | 7.5 | 0.2% | Nov 2, 2026 | The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. An attacker can craft a `Camer... |
| CVE-2026-58915 | MEDIUM | 6.1 | 0.1% | Nov 2, 2026 | A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensit... |
| CVE-2026-58873 | HIGH | 8.4 | 0.1% | Nov 2, 2026 | In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission c... |