CVE Vulnerability Database
Search and browse 420,253 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-119367 | MEDIUM | 5.4 | — | Oct 30, 2026 | Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting ... |
| CVE-2026-119365 | MEDIUM | 6.5 | — | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media Pla... |
| CVE-2026-119300 | MEDIUM | 6.5 | 0.3% | Oct 30, 2026 | Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users.... |
| CVE-2026-119299 | MEDIUM | 5.9 | — | Oct 30, 2026 | gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes a... |
| CVE-2026-119298 | MEDIUM | 4.2 | — | Oct 30, 2026 | croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the rec... |
| CVE-2026-119148 | MEDIUM | 6.5 | — | Oct 30, 2026 | Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS... |
| CVE-2026-119116 | HIGH | 7.8 | — | Oct 30, 2026 | A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS... |
| CVE-2026-115642 | HIGH | 8.3 | — | Oct 30, 2026 | In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in poss... |
| CVE-2026-112816 | CRITICAL | 10 | — | Oct 30, 2026 | Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11... |
| CVE-2026-104623 | MEDIUM | 6.3 | — | Oct 30, 2026 | A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE R... |
| CVE-2025-49602 | CRITICAL | 9.8 | 0.4% | Oct 30, 2026 | An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having ... |
| CVE-2026-62141 | MEDIUM | 5.4 | — | Oct 30, 2026 | Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured... |
| CVE-2026-119722 | HIGH | 7.8 | 0.2% | Oct 30, 2026 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skip... |
| CVE-2026-119721 | MEDIUM | 6.1 | 0.2% | Oct 30, 2026 | Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blo_bhead_id_* accessors in r... |
| CVE-2026-119720 | MEDIUM | 5.5 | 0.1% | Oct 30, 2026 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in read_file_dna() that read... |
| CVE-2026-119719 | HIGH | 7.8 | 0.2% | Oct 30, 2026 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail ext... |
| CVE-2026-119718 | HIGH | 7.8 | 0.2% | Oct 30, 2026 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in p... |
| CVE-2026-119717 | — | — | 0.6% | Oct 30, 2026 | Rejected reason: This CVE ID has been rejected as a duplicate. |
| CVE-2026-119716 | CRITICAL | 9.8 | 0.5% | Oct 30, 2026 | pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulnerability in pybars/_compiler.py that allo... |
| CVE-2026-119715 | MEDIUM | 4.3 | 0.2% | Oct 30, 2026 | NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to frame the authenticated interfac... |
| CVE-2026-119714 | MEDIUM | 6.5 | — | Oct 30, 2026 | My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerability that allows unauthenticate... |
| CVE-2026-119713 | HIGH | 8.8 | — | Oct 30, 2026 | Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders ... |
| CVE-2026-119712 | MEDIUM | 6.4 | 0.3% | Oct 30, 2026 | PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows... |
| CVE-2026-119711 | MEDIUM | 5.3 | 0.2% | Oct 30, 2026 | PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that allows unauthenticated attackers... |
| CVE-2026-119710 | HIGH | 7.1 | — | Oct 30, 2026 | PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only th... |