CVE Vulnerability Database
Search and browse 420,242 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-120310 | LOW | 3.1 | 0.2% | Nov 2, 2026 | Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 returns stored field values in object update responses witho... |
| CVE-2026-120309 | LOW | 3.7 | — | Nov 2, 2026 | Nuxt from 4.6.0 before 4.6.2 contains a route parameter confusion vulnerability in getRouterParam and getRouterParams th... |
| CVE-2026-120323 | MEDIUM | 4.3 | — | Nov 2, 2026 | A security flaw has been discovered in samanhappy MCPHub up to 1.0.45/1.1.7. Impacted is an unknown function of the file... |
| CVE-2026-120322 | CRITICAL | 9.9 | — | Nov 2, 2026 | A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some unknown processing of the file ... |
| CVE-2026-120320 | MEDIUM | 4.7 | 0.4% | Nov 2, 2026 | A vulnerability was determined in jxxghp MoviePilot up to 3.1.2. This vulnerability affects the function WorkflowExecuto... |
| CVE-2026-120319 | MEDIUM | 6.3 | 0.3% | Nov 2, 2026 | A vulnerability was found in Sanluan PublicCMS 4.x/5.x/6.x. This affects the function TradeRefundService.updateAmound of... |
| CVE-2026-120283 | CRITICAL | 10 | — | Nov 2, 2026 | A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/... |
| CVE-2026-120282 | CRITICAL | 9.9 | — | Nov 2, 2026 | A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol... |
| CVE-2026-120281 | CRITICAL | 10 | 0.6% | Nov 2, 2026 | A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of t... |
| CVE-2026-120280 | CRITICAL | 10 | 2.0% | Nov 2, 2026 | A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group h... |
| CVE-2026-120279 | CRITICAL | 10 | — | Nov 2, 2026 | A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.c... |
| CVE-2026-120278 | MEDIUM | 5.3 | — | Nov 2, 2026 | A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0. Impacted is the function sub_416d48/sub_41a7c0 of the ... |
| CVE-2026-120277 | CRITICAL | 10 | 2.5% | Nov 2, 2026 | A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1... |
| CVE-2026-120276 | CRITICAL | 10 | 3.2% | Nov 2, 2026 | A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 o... |
| CVE-2026-95863 | HIGH | 7.6 | 0.3% | Nov 1, 2026 | Improper neutralization of input during web page generation in Apache Wicket. Apache Wicket generates JavaScript that r... |
| CVE-2026-87718 | LOW | 2.3 | 0.3% | Nov 1, 2026 | Apache Wicket 10.10.0, 10.11.0 and 9.24.0 do not set the Content-Security-Policy headers on a page whose render request ... |
| CVE-2026-84231 | HIGH | 7.4 | 0.3% | Nov 1, 2026 | Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.link.Extern... |
| CVE-2026-84177 | MEDIUM | 6.3 | 0.3% | Nov 1, 2026 | Incorrect behavior order in Apache Wicket: a file path is validated before the framework appends the attributes that com... |
| CVE-2026-84172 | MEDIUM | 6.3 | 0.3% | Nov 1, 2026 | Files accessible to external parties in Apache Wicket. org.apache.wicket.markup.html.PackageResourceGuard decides wheth... |
| CVE-2026-84170 | HIGH | 8.3 | 0.3% | Nov 1, 2026 | Allocation of resources without limits or throttling in Apache Wicket. org.apache.wicket.markup.html.form.upload.resour... |
| CVE-2026-83594 | HIGH | 8.3 | 0.3% | Nov 1, 2026 | Memory allocation with an excessive size value in Apache Wicket. org.apache.wicket.markup.html.form.upload.resource.Fil... |
| CVE-2026-83559 | HIGH | 7.4 | 0.3% | Nov 1, 2026 | Improper encoding or escaping of output in Apache Wicket. org.apache.wicket.core.util.string.JavaScriptUtils#escapeQuot... |
| CVE-2026-83539 | HIGH | 7.4 | 0.3% | Nov 1, 2026 | Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.extensions.markup.html.... |
| CVE-2026-82956 | HIGH | 7.6 | 0.3% | Nov 1, 2026 | Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.ajax.AjaxNewWindowNotif... |
| CVE-2026-120275 | MEDIUM | 5.5 | — | Nov 1, 2026 | A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part... |