CVE Vulnerability Database
Search and browse 419,784 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-82904 | HIGH | 7.5 | — | Nov 5, 2026 | Uncontrolled Resource Consumption in ServiceMultiEventHandler in Apache OFBiz 24.09 before 24.09.08 on all platforms all... |
| CVE-2026-82902 | MEDIUM | 4.3 | — | Nov 5, 2026 | Server-Side Request Forgery in ViewDataFile in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authe... |
| CVE-2026-76563 | MEDIUM | 6.1 | — | Nov 5, 2026 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Fileorbis Informatics Ser... |
| CVE-2026-123059 | HIGH | 7.5 | — | Nov 5, 2026 | In Eclipse BaSyx Helm Charts version 2.2.0 of the `aas-basyx-v2-full` chart, deployments with the bundled Keycloak enabl... |
| CVE-2026-123028 | HIGH | 7.3 | — | Nov 5, 2026 | A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown functionali... |
| CVE-2026-123024 | HIGH | 7.3 | — | Nov 5, 2026 | A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function get_current_user_id o... |
| CVE-2026-123023 | HIGH | 7.3 | — | Nov 5, 2026 | A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function check_permissions of the file s... |
| CVE-2026-123022 | HIGH | 7.3 | — | Nov 5, 2026 | A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.P... |
| CVE-2026-117691 | CRITICAL | 9.1 | — | Nov 5, 2026 | A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs because the server proce... |
| CVE-2026-114277 | — | — | — | Nov 5, 2026 | Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz. Apache OFBiz's optional Janrain Engage So... |
| CVE-2026-114272 | — | — | — | Nov 5, 2026 | Authorization Bypass Through User-Controlled Key in the content viewing component in Apache OFBiz 24.09 before 24.09.08 ... |
| CVE-2026-114271 | — | — | — | Nov 5, 2026 | Authorization Bypass Through User-Controlled Key in the shopping list services in Apache OFBiz 24.09 before 24.09.08 on ... |
| CVE-2026-114235 | — | — | — | Nov 5, 2026 | Direct Request ('Forced Browsing') in the Order component in Apache OFBiz 24.09 before 24.09.08 on all platforms allows ... |
| CVE-2026-114233 | — | — | — | Nov 5, 2026 | Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an aut... |
| CVE-2026-114229 | — | — | — | Nov 5, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Catalog image viewer in Apac... |
| CVE-2026-109928 | — | — | — | Nov 5, 2026 | Incorrect Implementation of Authentication Algorithm in the password-reset and login JWT validation in Apache OFBiz 24.0... |
| CVE-2026-109856 | — | — | — | Nov 5, 2026 | Direct Request ('Forced Browsing') to Financial Account services in Apache OFBiz 24.09 before 24.09.08 on all platforms ... |
| CVE-2026-109837 | — | — | — | Nov 5, 2026 | Authorization Bypass Through User-Controlled Key in Order Returns in Apache OFBiz 24.09 before 24.09.08 on all platforms... |
| CVE-2026-109129 | — | — | — | Nov 5, 2026 | Authorization Bypass Through User-Controlled Key in the Order Manager component in Apache OFBiz 24.09.07 on all platform... |
| CVE-2026-107912 | HIGH | 7.7 | — | Nov 5, 2026 | A flaw was found in the management interface of the Quarkus framework, specifically within the quarkus-vertx-http compon... |
| CVE-2026-105461 | — | — | — | Nov 5, 2026 | Missing check for ORDERMGR_UPDATE in ordermgr allows user with only ORDERMGR_VIEW permission to update orders. Affecte... |
| CVE-2026-105330 | — | — | — | Nov 5, 2026 | Use of Hard-coded Cryptographic Key in JWT token authentication in Apache OFBiz 24.09.06 and 24.09.07 on all platforms a... |
| CVE-2026-105325 | — | — | 0.1% | Nov 5, 2026 | Missing check for ACCOUNTING_UPDATE / ACCOUNTING_CREATE in accounting in allows user with only ACCOUNTING_VIEW permiss... |
| CVE-2026-105321 | HIGH | 7.5 | — | Nov 5, 2026 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Kobikom Telecommun... |
| CVE-2026-104720 | HIGH | 7.5 | — | Nov 5, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Kobikom Telecommunicatio... |