CVE Vulnerability Database
Search and browse 419,362 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-122330 | MEDIUM | 5.5 | — | Nov 5, 2026 | Blosc c-blosc2 before 3.5.0 contains a divide-by-zero vulnerability in blosc2_schunk_get_slice_buffer() in blosc/schunk.... |
| CVE-2026-122329 | HIGH | 7.8 | — | Nov 5, 2026 | SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw() in src/decoder_aiff.c due to miscalc... |
| CVE-2026-122328 | HIGH | 7.8 | — | Nov 5, 2026 | SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw() of src/decoder_wav.c w... |
| CVE-2026-122327 | MEDIUM | 4.3 | — | Nov 5, 2026 | Meelo through 3.13.1 contains a missing authorization vulnerability that allows authenticated non-admin users to modify ... |
| CVE-2026-122326 | MEDIUM | 5.3 | — | Nov 5, 2026 | Chevereto before 4.5.8 contains an authorization bypass vulnerability in the get-album-contents action of the /json rout... |
| CVE-2026-122325 | LOW | 3.1 | — | Nov 5, 2026 | fossasia eventyay-exhibition through commit f68888e contains an authorization bypass vulnerability in the exhibitor lead... |
| CVE-2026-122324 | LOW | 3.1 | — | Nov 5, 2026 | SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to read other user... |
| CVE-2026-122317 | MEDIUM | 4.3 | — | Nov 5, 2026 | SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any ac... |
| CVE-2026-121139 | HIGH | 7.8 | — | Nov 5, 2026 | The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability whereby the REST API grants an unauthen... |
| CVE-2026-119751 | MEDIUM | 5.3 | — | Nov 5, 2026 | Content Egg plugin for WordPress before 12.1.0 contains a broken access control vulnerability that allows unauthenticate... |
| CVE-2026-119345 | HIGH | 7.2 | — | Nov 5, 2026 | Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an atte... |
| CVE-2026-119344 | CRITICAL | 9.1 | — | Nov 5, 2026 | Cocos AI is a confidential computing system for AI. In version 0.8.2 and earlier, Cocos AI accepts trusted execution env... |
| CVE-2026-115740 | MEDIUM | 4.3 | — | Nov 5, 2026 | Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows the fi... |
| CVE-2026-115739 | MEDIUM | 6.5 | — | Nov 5, 2026 | Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows a rem... |
| CVE-2026-107891 | HIGH | 8.1 | — | Nov 5, 2026 | musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possi... |
| CVE-2026-104269 | HIGH | 8.6 | — | Nov 5, 2026 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.... |
| CVE-2026-103932 | MEDIUM | 5.8 | — | Nov 5, 2026 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.... |
| CVE-2026-102615 | HIGH | 7.6 | — | Nov 5, 2026 | HeyForm is an open-source form builder. Prior to 3.0.1, /api/upload accepts a file according to the client-controlled mu... |
| CVE-2026-102523 | HIGH | 8 | — | Nov 5, 2026 | MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and ... |
| CVE-2023-51466 | — | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 |
| CVE-2023-51465 | — | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 |
| CVE-2023-47089 | — | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 |
| CVE-2023-47088 | — | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 |
| CVE-2023-47087 | — | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 |
| CVE-2023-47086 | — | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 |