CVE Vulnerability Database
Search and browse 420,229 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105603 | CRITICAL | 9.4 | — | Nov 2, 2026 | Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 - The Joomla exten... |
| CVE-2026-120630 | CRITICAL | 9.1 | 0.2% | Nov 2, 2026 | CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTTP client, which both miss malicious content in URL... |
| CVE-2026-120627 | HIGH | 7.5 | 0.2% | Nov 2, 2026 | The Private Internet Access Extension for Firefox contains an unguarded onAuthRequired authentication handler, leading t... |
| CVE-2026-120416 | MEDIUM | 5.3 | 0.3% | Nov 2, 2026 | A security vulnerability has been detected in AndyFactory newspaper4k up to 0.9.6. This affects the function Article.par... |
| CVE-2026-119085 | HIGH | 8.8 | 0.5% | Nov 2, 2026 | Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engi... |
| CVE-2026-117068 | HIGH | 7.5 | 0.2% | Nov 2, 2026 | An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticate... |
| CVE-2026-117067 | — | — | — | Nov 2, 2026 | An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows a... |
| CVE-2026-111048 | HIGH | 8.4 | 0.3% | Nov 2, 2026 | FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.9, the admin/support/note_cre... |
| CVE-2026-106808 | HIGH | 7.5 | — | Nov 2, 2026 | OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM Nudm_UEAU Gener... |
| CVE-2026-106806 | HIGH | 7.5 | 0.2% | Nov 2, 2026 | A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header names cause previously allo... |
| CVE-2024-12139 | MEDIUM | 4.3 | — | Nov 2, 2026 | The error handling implementation fails to properly sanitize or validate user-supplied input within URL parameters under... |
| CVE-2026-88811 | CRITICAL | 9.1 | — | Nov 2, 2026 | Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud... |
| CVE-2026-88810 | HIGH | 7.2 | — | Nov 2, 2026 | A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules... |
| CVE-2026-65059 | HIGH | 7.5 | 0.2% | Nov 2, 2026 | Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflate... |
| CVE-2026-120596 | HIGH | 7.5 | — | Nov 2, 2026 | A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the Nut/Net TCP/IP stack incl... |
| CVE-2026-119301 | HIGH | 7.9 | — | Nov 2, 2026 | Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component in AWS SD... |
| CVE-2026-106807 | — | — | — | Nov 2, 2026 | A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transact... |
| CVE-2026-106805 | HIGH | 7.5 | 0.2% | Nov 2, 2026 | A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF do... |
| CVE-2026-106804 | HIGH | 7.5 | — | Nov 2, 2026 | A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module. The w_rx_aar_register() fu... |
| CVE-2026-106803 | CRITICAL | 9.8 | — | Nov 2, 2026 | A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module. When processing a ... |
| CVE-2026-105769 | CRITICAL | 9.3 | — | Nov 2, 2026 | kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-co... |
| CVE-2026-99242 | — | — | — | Nov 2, 2026 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix race between fallocate and mmap reads Th... |
| CVE-2026-99241 | — | — | — | Nov 2, 2026 | In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidate_lock in ntfs_filemap_page_mkw... |
| CVE-2026-99240 | — | — | 0.2% | Nov 2, 2026 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: error damos_commit_quota_goal() for ... |
| CVE-2026-99239 | HIGH | 7.8 | 0.1% | Nov 2, 2026 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: refuse __l2cap_chan_add if chan a... |