CVE Vulnerability Database
Search and browse 419,809 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-62365 | MEDIUM | 5.3 | 0.3% | Nov 4, 2026 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. D... |
| CVE-2026-57152 | HIGH | 7.1 | — | Nov 4, 2026 | GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and from 11.0.0 until 11.0.8, under cer... |
| CVE-2026-54384 | CRITICAL | 9.8 | 0.7% | Nov 4, 2026 | VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attackers to obt... |
| CVE-2026-54383 | MEDIUM | 6.5 | 0.2% | Nov 4, 2026 | VitaFit cloud API before 2026-10-30 contained an excessive data exposure vulnerability that allows any authenticated use... |
| CVE-2026-54382 | HIGH | 7.7 | 0.2% | Nov 4, 2026 | VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role th... |
| CVE-2026-54381 | HIGH | 7.5 | 0.4% | Nov 4, 2026 | VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability that allows unauthentic... |
| CVE-2026-53631 | MEDIUM | 5.3 | — | Nov 4, 2026 | GLPI is a free asset and IT management software package. From 0.83 until 10.0.27 and from 11.0.0 until 11.0.9, any authe... |
| CVE-2026-52848 | CRITICAL | 9.2 | — | Nov 4, 2026 | GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, during the login phase, an unauthenti... |
| CVE-2026-47678 | HIGH | 8.7 | — | Nov 4, 2026 | GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, any authenticated user can... |
| CVE-2026-122299 | HIGH | 8.8 | — | Nov 4, 2026 | Dulwich before 1.2.20 contains a commit object parsing vulnerability where the read path in _parse_commit resolves a dup... |
| CVE-2026-122048 | HIGH | 7.3 | 0.3% | Nov 4, 2026 | A vulnerability was identified in Campcodes Division Regional Athletic Meet Game Result Matrix System up to 2.1. This af... |
| CVE-2026-122047 | HIGH | 7.3 | — | Nov 4, 2026 | A security vulnerability has been detected in Campcodes Complete Advance Loan Management System 1.0. This affects the fu... |
| CVE-2026-122038 | HIGH | 7.3 | — | Nov 4, 2026 | A vulnerability was identified in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. A... |
| CVE-2026-122028 | MEDIUM | 4.3 | — | Nov 4, 2026 | A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.0. Affected by this vulnerability is an unknown function... |
| CVE-2026-115770 | CRITICAL | 9.6 | — | Nov 4, 2026 | Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.2.0 until 2.12.0... |
| CVE-2026-108387 | HIGH | 8.5 | — | Nov 4, 2026 | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.2, attacker-controlled data ... |
| CVE-2026-102337 | MEDIUM | 4.9 | — | Nov 4, 2026 | Webmin is a web-based system administration tool for Unix-like servers. Prior to 2.652, untrusted users with access to t... |
| CVE-2026-97693 | CRITICAL | 9.9 | — | Nov 4, 2026 | Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. From 0.6.0.beta1... |
| CVE-2026-76893 | MEDIUM | 6.9 | 0.3% | Nov 4, 2026 | tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.2, the HTTP mode ... |
| CVE-2026-63655 | HIGH | 7.5 | 0.4% | Nov 4, 2026 | tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode ... |
| CVE-2026-58128 | MEDIUM | 6.2 | — | Nov 4, 2026 | Alan: Health Insurance for Android (com.alanmobile) 1.450.0 contains a path traversal vulnerability that allows a co-res... |
| CVE-2026-57567 | HIGH | 8.6 | 0.7% | Nov 4, 2026 | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading expe... |
| CVE-2026-57566 | CRITICAL | 9.3 | 0.6% | Nov 4, 2026 | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading expe... |
| CVE-2026-57565 | MEDIUM | 6.5 | 1.0% | Nov 4, 2026 | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading expe... |
| CVE-2026-57562 | MEDIUM | 6.5 | 0.4% | Nov 4, 2026 | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading expe... |