CVE Vulnerability Database
Search and browse 420,229 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-67186 | — | — | — | Nov 2, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-120656 | HIGH | 7.5 | 0.2% | Nov 2, 2026 | OpenKruise kruise-manager exposes an unauthenticated pprof endpoint, enabled by default, opening it on 0.0.0.0:8090, whi... |
| CVE-2026-120497 | MEDIUM | 5 | — | Nov 2, 2026 | Stored cross-site scripting (XSS) in the HTML report generator in the aidlc-traceability CLI in AWS AI-DLC Workflows bef... |
| CVE-2026-120067 | MEDIUM | 5.9 | — | Nov 2, 2026 | For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns to... |
| CVE-2026-120066 | MEDIUM | 5.3 | — | Nov 2, 2026 | On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program... |
| CVE-2026-120065 | HIGH | 7.1 | — | Nov 2, 2026 | For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC uses that column to i... |
| CVE-2026-120064 | HIGH | 7.5 | — | Nov 2, 2026 | Several psqlODBC entry points use an application-supplied column number or row index as an array index without validatin... |
| CVE-2026-120063 | MEDIUM | 5.9 | — | Nov 2, 2026 | When psqlODBC quotes a schema or table name into a 128-byte stack buffer, its length check lets it write up to two bytes... |
| CVE-2026-120062 | HIGH | 7.5 | — | Nov 2, 2026 | SQLSpecialColumns in psqlODBC splices the table and schema names it receives into its catalog query without escaping the... |
| CVE-2026-120061 | HIGH | 7.5 | — | Nov 2, 2026 | The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument offsets of a {fn} escape into ... |
| CVE-2026-120060 | MEDIUM | 5.9 | — | Nov 2, 2026 | psqlODBC trusts counts and lengths in server data in three places. SQLBulkOperations uses a server-supplied row count in... |
| CVE-2026-120059 | MEDIUM | 6.8 | — | Nov 2, 2026 | For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that column's ... |
| CVE-2026-120058 | HIGH | 7.5 | — | Nov 2, 2026 | psqlODBC sizes its row cache from the column count of a cursor's first result, but recomputes the column count from each... |
| CVE-2026-120057 | HIGH | 7.5 | — | Nov 2, 2026 | psqlODBC copies the reply to a large-object read (loread) into the application's buffer using the length sent by the ser... |
| CVE-2026-119736 | HIGH | 8.2 | 0.3% | Nov 2, 2026 | Attendo (formerly Petpooja Payroll) Admin Android application version 3.0.13 and earlier contains a hard-coded credentia... |
| CVE-2026-119735 | MEDIUM | 5.4 | — | Nov 2, 2026 | Munshi (by Petpooja) before 2026-07-13 contained a stored cross-site scripting vulnerability that allows authenticated u... |
| CVE-2026-119734 | MEDIUM | 6.5 | 0.2% | Nov 2, 2026 | Munshi (by Petpooja) before 2026-06-17 contained a broken object level authorization vulnerability that allows authentic... |
| CVE-2026-119733 | HIGH | 8.1 | — | Nov 2, 2026 | Munshi (by Petpooja) before 2026-07-07 contained a missing authorization vulnerability in its company deletion workflow ... |
| CVE-2026-119732 | MEDIUM | 6.5 | 0.2% | Nov 2, 2026 | Munshi (by Petpooja) before 2026-07-28 contained a broken object level authorization vulnerability that allows authentic... |
| CVE-2026-119731 | HIGH | 7.5 | — | Nov 2, 2026 | Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its subscription payment webhook at P... |
| CVE-2026-117127 | HIGH | 7.5 | 0.4% | Nov 2, 2026 | Directory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to obtain sensitive information via... |
| CVE-2026-117069 | HIGH | 7.5 | — | Nov 2, 2026 | An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticat... |
| CVE-2026-105606 | CRITICAL | 9.5 | — | Nov 2, 2026 | Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8 - An unauthenticated ... |
| CVE-2026-105605 | MEDIUM | 5.3 | — | Nov 2, 2026 | Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3 - ... |
| CVE-2026-105604 | CRITICAL | 9.3 | — | Nov 2, 2026 | Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 - The Joomla extension D... |