CVE Vulnerability Database
Search and browse 420,253 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-75882 | HIGH | 8.5 | — | Oct 30, 2026 | An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with s... |
| CVE-2026-64860 | MEDIUM | 6.5 | — | Oct 30, 2026 | ESP-Protocols is a collection of protocol components for ESP-IDF. Prior to mDNS version 1.11.2, the `mdns` component fol... |
| CVE-2026-13576 | HIGH | 7.5 | 0.1% | Oct 30, 2026 | CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes. Passwords are hashed wit... |
| CVE-2026-119038 | MEDIUM | 6.1 | 0.2% | Oct 30, 2026 | Business::GoCardless versions before 1.01 for Perl complete redirect flows without checking the session token, letting a... |
| CVE-2026-119037 | HIGH | 7.5 | 0.1% | Oct 30, 2026 | Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a configured webhook secret is undef or e... |
| CVE-2026-119036 | HIGH | 7.5 | 0.2% | Oct 30, 2026 | Business::GoCardless versions before 1.01 for Perl allow memory exhaustion by flattening legacy webhook payloads before ... |
| CVE-2026-118996 | MEDIUM | 4.9 | 0.2% | Oct 30, 2026 | CallBackery versions before 0.62.0 for Perl send users their own password hash and the admin-only user note via getUserC... |
| CVE-2026-118995 | CRITICAL | 9.1 | 0.3% | Oct 30, 2026 | CallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidator. creat... |
| CVE-2026-118994 | CRITICAL | 9.8 | 0.2% | Oct 30, 2026 | CallBackery versions before 0.62.0 for Perl allow log injection via newlines in the login name. login() writes the logi... |
| CVE-2026-118993 | HIGH | 7.5 | 0.2% | Oct 30, 2026 | CallBackery versions before 0.62.0 for Perl allow denial of service via the request path interpolated as a regular expre... |
| CVE-2026-118992 | HIGH | 8.4 | — | Oct 30, 2026 | CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configur... |
| CVE-2026-118991 | HIGH | 7.5 | 0.1% | Oct 30, 2026 | CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key. getC... |
| CVE-2026-118990 | MEDIUM | 5.5 | 0.2% | Oct 30, 2026 | CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when takin... |
| CVE-2026-118988 | HIGH | 7.5 | 0.2% | Oct 30, 2026 | CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in t... |
| CVE-2026-116130 | CRITICAL | 9.1 | 0.3% | Oct 30, 2026 | HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request. The XS ... |
| CVE-2026-116128 | HIGH | 7.5 | 0.2% | Oct 30, 2026 | Starlet versions from 0.20 before 0.33 for Perl allow memory exhaustion via unbounded buffering when decoding chunked re... |
| CVE-2026-116127 | CRITICAL | 9.1 | 0.2% | Oct 30, 2026 | Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persi... |
| CVE-2026-115866 | HIGH | 7.5 | 0.2% | Oct 30, 2026 | Starlet versions from 0.20 before 0.33 for Perl allow CPU exhaustion via regular expression backtracking when decoding c... |
| CVE-2026-115865 | HIGH | 7.5 | 0.2% | Oct 30, 2026 | Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting me... |
| CVE-2026-112374 | MEDIUM | 4.3 | 0.2% | Oct 30, 2026 | FOSSBilling before 0.8.9 contains a Cross-Site Request Forgery vulnerability in the staff guest login endpoint (POST /ap... |
| CVE-2026-111503 | HIGH | 7.1 | — | Oct 30, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an ... |
| CVE-2026-111502 | MEDIUM | 4.3 | — | Oct 30, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Insufficiently Protected Credentials vulnerability. A l... |
| CVE-2026-111501 | MEDIUM | 5.4 | — | Oct 30, 2026 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attemp... |
| CVE-2026-119591 | MEDIUM | 5.5 | 0.2% | Oct 30, 2026 | SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to cra... |
| CVE-2026-119586 | HIGH | 7.8 | 0.8% | Oct 30, 2026 | SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits a... |