CVE Vulnerability Database
Search and browse 419,817 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-116376 | LOW | 3.4 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct a phishing attack d... |
| CVE-2026-115762 | MEDIUM | 6.1 | — | Nov 4, 2026 | draw.io is a configurable diagramming and whiteboarding application. Prior to 31.1.5, the GraphML decoder contains a pro... |
| CVE-2026-115758 | HIGH | 8.2 | — | Nov 4, 2026 | SumatraPDF is a multi-format reader for Windows. In version 3.6.1 and earlier, HttpGet() in src/base/Http_win.cpp uncond... |
| CVE-2026-110283 | MEDIUM | 4.3 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to cause a denial of service d... |
| CVE-2026-110282 | MEDIUM | 6.5 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restriction... |
| CVE-2026-110281 | MEDIUM | 5.9 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly validates TLS certificate validation, which could allow an atta... |
| CVE-2026-10859 | HIGH | 7.5 | 0.3% | Nov 4, 2026 | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1... |
| CVE-2026-108910 | MEDIUM | 4.3 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive informatio... |
| CVE-2026-108838 | LOW | 3.3 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a local attacker to cause a denial of service due to uncontrol... |
| CVE-2026-108767 | MEDIUM | 4.3 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct HTTP response split... |
| CVE-2026-108588 | MEDIUM | 5.4 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restriction... |
| CVE-2026-108536 | MEDIUM | 4.6 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restriction... |
| CVE-2026-105991 | LOW | 3.5 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restriction... |
| CVE-2026-105702 | MEDIUM | 4.3 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive informatio... |
| CVE-2026-104203 | HIGH | 7.5 | — | Nov 4, 2026 | Traccar is an open source GPS tracking system. From 5.1 until 6.15.0, WebModule.java's MediaFilter Guice mapping and Web... |
| CVE-2026-102664 | HIGH | 7.1 | — | Nov 4, 2026 | ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. Prior to 3.0.10, 3.1.10, and 4.0.10, decompress_mysq... |
| CVE-2026-102340 | HIGH | 8.5 | — | Nov 4, 2026 | Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the Traffic Ma... |
| CVE-2026-102339 | HIGH | 8.2 | — | Nov 4, 2026 | Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the Traffic Ma... |
| CVE-2025-71457 | CRITICAL | 9.8 | 0.4% | Nov 4, 2026 | vtenext 25.02 before 25.02.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to ch... |
| CVE-2025-71456 | HIGH | 8.1 | 0.3% | Nov 4, 2026 | vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users to inject ... |
| CVE-2025-71455 | MEDIUM | 5.3 | 0.3% | Nov 4, 2026 | vtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attackers to read the PHPSESSI... |
| CVE-2025-71454 | MEDIUM | 6.5 | 0.2% | Nov 4, 2026 | vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrf_check() in include/utils/Vte... |
| CVE-2025-71453 | MEDIUM | 6.1 | 0.2% | Nov 4, 2026 | vtenext before 25.02.2 contains a reflected cross-site scripting vulnerability in modules/Home/HomeWidgetBlockList.php t... |
| CVE-2026-97705 | HIGH | 7.5 | 0.4% | Nov 4, 2026 | Moleculer is a progressive microservices framework for Node.js. Prior to 0.14.36 and 0.15.2, Parser._write in src/transp... |
| CVE-2026-76806 | MEDIUM | 6.3 | — | Nov 4, 2026 | Solidtime is an open-source time-tracking app. Prior to 0.16.0, TogglDataImporter::importData() read attacker-controlled... |