CVE Vulnerability Database

Search and browse 420,802 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-113867CRITICAL9.1Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming request...
CVE-2026-113866MEDIUM5.9When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service ov...
CVE-2026-113725HIGH7.8virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escap...
CVE-2026-113724MEDIUM4.5virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the safe_delete() deletion err...
CVE-2026-113723HIGH7.1virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text ca...
CVE-2026-113722HIGH7.8virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom...
CVE-2026-113721MEDIUM4.5virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplateActivator._generate...
CVE-2026-113720MEDIUM4.4virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses ...
CVE-2026-113719MEDIUM4.5virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInstall._uninstall_previous...
CVE-2026-113718HIGH7.1virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote()...
CVE-2026-113717LOW2.3virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInvoke.get_pip_install_cmd(...
CVE-2026-113716MEDIUM4.5virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the builtin creator calls ensu...
CVE-2026-113715LOW2virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads ...
CVE-2026-112380CRITICAL9.9Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operat...
CVE-2026-107692MEDIUM4.8The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet after the...
CVE-2026-97406CRITICAL9.1XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token ...
CVE-2026-75997——Rejected reason: this CVE was issued in error.
CVE-2026-75751——Rejected reason: this CVE was issued in error.
CVE-2026-75747——Rejected reason: this CVE was issued in error.
CVE-2026-48279——Rejected reason: this CVE was issued in error.
CVE-2026-21356——Rejected reason: this CVE was issued in error.
CVE-2026-21270——Rejected reason: this CVE was issued in error.
CVE-2026-21266——Rejected reason: this CVE was issued in error.
CVE-2026-113810HIGH7A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attack...
CVE-2026-113808HIGH7.1A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attack...