CVE Vulnerability Database
Search and browse 420,242 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109142 | HIGH | 8.4 | — | Nov 2, 2026 | When a CA's parent lives on the same Krill server: instead of building and verifying a signed CMS message, it runs the R... |
| CVE-2026-109141 | HIGH | 8.4 | — | Nov 2, 2026 | The vulnerability gives a role that is restricted to a list of CAs (cas = [...]) its full permission set for every reque... |
| CVE-2026-109140 | HIGH | 8.4 | — | Nov 2, 2026 | The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter that is reset to 0 ... |
| CVE-2026-104080 | HIGH | 7.8 | 1.2% | Nov 2, 2026 | Control Web Panel (CWP) before webpanel_version 1.29 contains an OS command injection vulnerability in the loopback API ... |
| CVE-2026-73697 | HIGH | 8.8 | — | Nov 2, 2026 | Control Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection vulnerabi... |
| CVE-2026-73696 | HIGH | 8.1 | 0.5% | Nov 2, 2026 | Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user pane... |
| CVE-2026-73695 | HIGH | 8.8 | — | Nov 2, 2026 | Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in services/users/index.php... |
| CVE-2026-120492 | MEDIUM | 5.4 | 0.2% | Nov 2, 2026 | Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass pat... |
| CVE-2026-120491 | MEDIUM | 5.4 | — | Nov 2, 2026 | Wing FTP Server before 8.2.6 contains a stored cross-site scripting vulnerability that allows authenticated web-client u... |
| CVE-2026-120489 | MEDIUM | 4.3 | — | Nov 2, 2026 | Outline before 1.12.0 contains an incorrect authorization vulnerability in authorizeDocumentPublish() that allows authen... |
| CVE-2026-120488 | MEDIUM | 5.4 | — | Nov 2, 2026 | LaraDashboard before 1.4.9 contains a stored cross-site scripting vulnerability that allows authenticated users with pos... |
| CVE-2026-120487 | HIGH | 7.2 | 0.5% | Nov 2, 2026 | LaraDashboard before 1.4.5 contains an incorrect authorization vulnerability in SettingPolicy::manageCoreUpgrades() that... |
| CVE-2026-120461 | HIGH | 8.8 | — | Nov 2, 2026 | Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh_command/batch that resolves comma... |
| CVE-2026-120460 | HIGH | 8.8 | — | Nov 2, 2026 | Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to ma... |
| CVE-2026-120459 | HIGH | 7.4 | — | Nov 2, 2026 | python-jose through 3.5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge... |
| CVE-2026-120458 | MEDIUM | 5.5 | 0.2% | Nov 2, 2026 | Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_header() in src/encmain.c that allows attackers to... |
| CVE-2026-120457 | MEDIUM | 5.3 | — | Nov 2, 2026 | libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows attackers... |
| CVE-2026-120456 | MEDIUM | 6.1 | — | Nov 2, 2026 | L-SMASH through 2.14.5 contains a heap out-of-bounds write vulnerability in isom_read_hdlr() and isom_read_dref_entry() ... |
| CVE-2026-120455 | MEDIUM | 6.1 | — | Nov 2, 2026 | rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine::_add_annotation() that allows att... |
| CVE-2026-120454 | MEDIUM | 5.5 | 0.1% | Nov 2, 2026 | The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfs_decompress_lzvn_attr() that a... |
| CVE-2026-120453 | LOW | 3.3 | — | Nov 2, 2026 | The Sleuth Kit through 4.15.0 contains a heap out-of-bounds read vulnerability in hfs_load_extended_attrs() in tsk/fs/hf... |
| CVE-2026-120452 | MEDIUM | 5.4 | — | Nov 2, 2026 | libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allo... |
| CVE-2026-120451 | MEDIUM | 6.8 | 0.2% | Nov 2, 2026 | libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005c_init() that all... |
| CVE-2026-120450 | MEDIUM | 4.3 | 0.2% | Nov 2, 2026 | LaraDashboard 1.4.0 before 1.4.9 contains an improper authorization vulnerability that allows authenticated users with r... |
| CVE-2026-120449 | MEDIUM | 5.3 | — | Nov 2, 2026 | Outline before 1.12.0 contains an improper access control vulnerability that allows unauthenticated users to read unpubl... |