CVE Vulnerability Database
Search and browse 420,242 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-119480 | MEDIUM | 6.5 | 0.4% | Nov 1, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetFormBuilde... |
| CVE-2026-120232 | HIGH | 8.8 | 0.2% | Nov 1, 2026 | A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the functi... |
| CVE-2026-120231 | CRITICAL | 9.9 | 1.7% | Nov 1, 2026 | A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of th... |
| CVE-2026-120230 | CRITICAL | 9.9 | 2.2% | Nov 1, 2026 | A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web B... |
| CVE-2026-120229 | CRITICAL | 9.1 | 2.8% | Nov 1, 2026 | A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file... |
| CVE-2026-120228 | CRITICAL | 9.9 | 1.7% | Nov 1, 2026 | A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file... |
| CVE-2026-117680 | LOW | 2.1 | 0.2% | Nov 1, 2026 | Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in lud ... |
| CVE-2026-120308 | CRITICAL | 9.9 | 0.5% | Nov 1, 2026 | A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path ... |
| CVE-2026-120307 | CRITICAL | 9.9 | 0.5% | Nov 1, 2026 | The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's... |
| CVE-2026-120306 | CRITICAL | 9.9 | 0.4% | Nov 1, 2026 | Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on t... |
| CVE-2026-120227 | CRITICAL | 9.9 | 2.2% | Nov 1, 2026 | A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the file stat... |
| CVE-2026-120226 | LOW | 3.3 | 0.1% | Nov 1, 2026 | A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Affected by t... |
| CVE-2026-13575 | — | — | 0.9% | Nov 1, 2026 | HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Sessio... |
| CVE-2026-120225 | CRITICAL | 9.1 | 0.7% | Nov 1, 2026 | A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the function con... |
| CVE-2026-120224 | CRITICAL | 9.9 | 0.4% | Nov 1, 2026 | A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function run_apis_by_json/run... |
| CVE-2026-120263 | CRITICAL | 9.8 | 0.2% | Nov 1, 2026 | When `[oauth2_client].ACCOUNT_LINKING` is set to `auto` (not the default) and registration is enabled, the link-account ... |
| CVE-2026-120223 | LOW | 3.1 | 0.3% | Nov 1, 2026 | A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function session_get of the file ... |
| CVE-2026-119627 | MEDIUM | 4.3 | 0.2% | Nov 1, 2026 | The web profile and RSS/Atom feed routes of users and organizations checked only whether a signed-in viewer could see a ... |
| CVE-2026-119625 | MEDIUM | 4.3 | 0.2% | Nov 1, 2026 | The `/{username}` web route accepted personal access tokens over HTTP Basic authentication without checking their scope.... |
| CVE-2026-119533 | HIGH | 7.5 | 0.1% | Nov 1, 2026 | Repository and organization project boards listed the pull requests that reference each issue on the board without check... |
| CVE-2026-119441 | HIGH | 7.5 | 0.1% | Nov 1, 2026 | `DELETE /api/v1/orgs/{org}/repos` deletes all repositories of an organization, but it did not enforce the public-only re... |
| CVE-2026-118504 | MEDIUM | 6.5 | 0.2% | Nov 1, 2026 | The web interface blocks issue and pull request changes on archived repositories, but several issue routes of the REST A... |
| CVE-2026-118395 | HIGH | 7.5 | 0.2% | Nov 1, 2026 | Gitea 1.27.3 stopped personal access tokens restricted to public resources (`public-only`) from creating repositories th... |
| CVE-2026-118394 | MEDIUM | 4.3 | 0.1% | Nov 1, 2026 | The OAuth2 userinfo endpoint (`/login/oauth/userinfo`) decided whether to limit the `groups` claim to public organizatio... |
| CVE-2026-118386 | MEDIUM | 6.5 | 0.1% | Nov 1, 2026 | Workflows triggered by a pull request review were read from the commit named in the review's `commit_id`, while the fork... |