CVE Vulnerability Database
Search and browse 420,242 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-118052 | MEDIUM | 6.8 | — | Nov 2, 2026 | In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders return an overflow error without rele... |
| CVE-2025-71450 | LOW | 3.3 | 0.1% | Nov 2, 2026 | inih before r63 contains a one-byte stack buffer under-read in ini_parse_stream() in ini.c that allows attackers to read... |
| CVE-2025-62819 | MEDIUM | 6.5 | 0.2% | Nov 2, 2026 | Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the... |
| CVE-2026-74993 | HIGH | 7.5 | — | Nov 2, 2026 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Starnet Computer a... |
| CVE-2026-120463 | MEDIUM | 6.5 | 0.3% | Nov 2, 2026 | Warracker before 1.0.4 contains a missing authorization vulnerability in its Paperless-ngx integration that allows an au... |
| CVE-2026-114364 | CRITICAL | 9.8 | 0.2% | Nov 2, 2026 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Syncope. ... |
| CVE-2026-113687 | CRITICAL | 9.8 | 0.2% | Nov 2, 2026 | Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlemen... |
| CVE-2026-113511 | CRITICAL | 9.1 | 0.2% | Nov 2, 2026 | Authorization bypass through User-Controlled key vulnerability in Apache Syncope. A delegated administrator can reloc... |
| CVE-2026-111959 | CRITICAL | 9.1 | 0.2% | Nov 2, 2026 | Out-of-bounds read vulnerability in Apache Arrow Rust (`arrow` crate), from version 33.0.0 through to versions 57.3.1, 5... |
| CVE-2026-110535 | HIGH | 8.8 | 0.3% | Nov 2, 2026 | Improper Privilege Management vulnerability in Apache Syncope. AuthProfile self-updates allow non-admin users to conf... |
| CVE-2026-109083 | CRITICAL | 9.8 | 0.2% | Nov 2, 2026 | Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements... |
| CVE-2026-105602 | HIGH | 8.6 | — | Nov 2, 2026 | Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.1... |
| CVE-2026-105601 | MEDIUM | 5.3 | — | Nov 2, 2026 | Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5 |
| CVE-2026-105600 | HIGH | 8.6 | — | Nov 2, 2026 | Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5 |
| CVE-2026-103420 | HIGH | 7.2 | — | Nov 2, 2026 | Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5 |
| CVE-2026-103419 | HIGH | 8.6 | — | Nov 2, 2026 | Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11. |
| CVE-2026-102802 | HIGH | 8.9 | — | Nov 2, 2026 | Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles A... |
| CVE-2026-102801 | MEDIUM | 5.1 | — | Nov 2, 2026 | Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension... |
| CVE-2026-94349 | HIGH | 8 | — | Nov 2, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an ... |
| CVE-2026-92886 | HIGH | 7.8 | — | Nov 2, 2026 | Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-register allows Privi... |
| CVE-2026-91911 | MEDIUM | 6.1 | — | Nov 2, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Direc... |
| CVE-2026-91910 | MEDIUM | 5.7 | 0.2% | Nov 2, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Direc... |
| CVE-2026-91909 | HIGH | 8 | 0.7% | Nov 2, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Com... |
| CVE-2026-91908 | MEDIUM | 6.8 | 0.1% | Nov 2, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulner... |
| CVE-2026-91907 | MEDIUM | 6.1 | 0.1% | Nov 2, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Input During Web Page Genera... |