CVE Vulnerability Database
Search and browse 420,242 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-91906 | MEDIUM | 5.5 | — | Nov 2, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource v... |
| CVE-2026-91905 | MEDIUM | 6.7 | 0.1% | Nov 2, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulner... |
| CVE-2026-91904 | MEDIUM | 5.5 | 0.1% | Nov 2, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource v... |
| CVE-2026-91903 | MEDIUM | 6.1 | 0.2% | Nov 2, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Direc... |
| CVE-2026-116606 | CRITICAL | 9.3 | — | Nov 2, 2026 | An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated r... |
| CVE-2026-111560 | HIGH | 8.6 | — | Nov 2, 2026 | Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance produ... |
| CVE-2024-12141 | MEDIUM | 4.3 | — | Nov 2, 2026 | The product fails to sufficiently validate callback URLs, allowing them to be manipulated with malicious payloads when p... |
| CVE-2026-100140 | LOW | 1.9 | — | Nov 2, 2026 | An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt. |
| CVE-2024-9517 | MEDIUM | 4.9 | — | Nov 2, 2026 | The refresh token grant type in WSO2 products fails to re-validate account status before issuing new access tokens. This... |
| CVE-2026-8923 | HIGH | 8.7 | — | Nov 2, 2026 | Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated Re... |
| CVE-2026-2613 | HIGH | 8.7 | — | Nov 2, 2026 | The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the struc... |
| CVE-2026-120216 | MEDIUM | 5.9 | — | Nov 2, 2026 | fastify is a web framework for Node.js. In versions 5.8.0 through 5.12.7, when the server is configured with a nonzero h... |
| CVE-2026-120215 | LOW | 3.7 | — | Nov 2, 2026 | @fastify/cors is the CORS plugin for the Fastify web framework. In versions 8.2.0 through 11.3.x, an application that re... |
| CVE-2026-120214 | MEDIUM | 5.9 | — | Nov 2, 2026 | @fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In v... |
| CVE-2026-120213 | CRITICAL | 9.1 | — | Nov 2, 2026 | @fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In v... |
| CVE-2026-117549 | MEDIUM | 4.2 | — | Nov 2, 2026 | @fastify/secure-session is a session plugin for Fastify that stores an encrypted session in a cookie. In versions 7.5.0 ... |
| CVE-2026-117531 | MEDIUM | 5.9 | — | Nov 2, 2026 | @fastify/multipart is the multipart form-data and file upload plugin for the Fastify web framework. In versions 5.3.0 th... |
| CVE-2026-117518 | HIGH | 8.2 | — | Nov 2, 2026 | @fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP server. In versions up to and includi... |
| CVE-2025-12544 | MEDIUM | 4.8 | 0.2% | Nov 2, 2026 | The Publisher portal fails to enforce proper validation on uploaded SVG files, allowing users with the Publisher role to... |
| CVE-2024-2372 | MEDIUM | 5.4 | — | Nov 2, 2026 | The affected components accept user-supplied input for constructing redirection URLs without enforcing expected validati... |
| CVE-2026-18800 | MEDIUM | 4.4 | — | Nov 2, 2026 | When an Event Publisher output adapter is configured with properties that are irrelevant to its function, the affected p... |
| CVE-2026-118871 | MEDIUM | 6.5 | — | Nov 2, 2026 | SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL inje... |
| CVE-2025-13647 | MEDIUM | 5.8 | 0.2% | Nov 2, 2026 | The affected component fails to enforce expected validation constraints on the `content-type` header when processing cer... |
| CVE-2024-7075 | MEDIUM | 4.6 | — | Nov 2, 2026 | The user search function within the management console fails to properly encode user-supplied input before rendering it ... |
| CVE-2026-107457 | LOW | 2.3 | — | Nov 2, 2026 | A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settin... |