CVE Vulnerability Database
Search and browse 419,817 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-122220 | HIGH | 7.4 | 0.3% | Nov 4, 2026 | WPO365 | LOGIN (wpo365-login) plugin before version 45.2 contains an authentication bypass by capture-replay vulnerabili... |
| CVE-2026-122192 | HIGH | 7.5 | — | Nov 4, 2026 | Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with r... |
| CVE-2026-121933 | CRITICAL | 10 | — | Nov 4, 2026 | A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function save_settings of the file /wizard/apply.cgi... |
| CVE-2026-115574 | MEDIUM | 5.3 | 0.7% | Nov 4, 2026 | Zulip is an open-source team collaboration tool. From 11.0 until 12.2, organizations with web-public channels enabled ex... |
| CVE-2026-115474 | MEDIUM | 6.5 | 0.3% | Nov 4, 2026 | Zulip is an open-source team collaboration tool. From 8.0 until 12.2, in organizations where the Who can view all other ... |
| CVE-2026-113374 | HIGH | 8.6 | 0.3% | Nov 4, 2026 | Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. ... |
| CVE-2026-113373 | CRITICAL | 9.1 | 0.2% | Nov 4, 2026 | Sonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML o... |
| CVE-2026-113372 | HIGH | 7.1 | 0.2% | Nov 4, 2026 | Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds ... |
| CVE-2026-113371 | HIGH | 7.1 | 0.2% | Nov 4, 2026 | Sonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repository, through an internal REST endpoin... |
| CVE-2026-113370 | HIGH | 7.7 | 0.2% | Nov 4, 2026 | Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional "Reindex Search Tables By Pattern" ta... |
| CVE-2026-113369 | MEDIUM | 6.3 | 0.2% | Nov 4, 2026 | Sonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository (a user account tha... |
| CVE-2026-113368 | MEDIUM | 5.3 | 0.2% | Nov 4, 2026 | Sonatype Nexus Repository 3 does not check that a user account is authorized to access a repository before the repositor... |
| CVE-2026-97701 | MEDIUM | 6.5 | 0.4% | Nov 4, 2026 | Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, the authenticated POST /messages... |
| CVE-2026-82033 | HIGH | 8.4 | — | Nov 4, 2026 | DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication vulnerabilit... |
| CVE-2026-82029 | MEDIUM | 6.5 | 0.2% | Nov 4, 2026 | Invoice Ninja before 5.13.28 contains a broken access control vulnerability that allows authenticated vendor-portal cont... |
| CVE-2026-63183 | MEDIUM | 6.9 | 0.2% | Nov 4, 2026 | OmniAuth is a flexible authentication system utilizing Rack middleware. Prior to 2.2.0, OmniAuth derives provider callba... |
| CVE-2026-122148 | HIGH | 8.2 | 0.2% | Nov 4, 2026 | In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerabili... |
| CVE-2026-122124 | MEDIUM | 6.1 | — | Nov 4, 2026 | On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credentials... |
| CVE-2026-122120 | CRITICAL | 9 | 0.5% | Nov 4, 2026 | In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenari... |
| CVE-2026-121932 | CRITICAL | 10 | — | Nov 4, 2026 | A vulnerability was detected in Linksys E5350 1.0.00.037. This affects the function system of the file /wizard/apply.cgi... |
| CVE-2026-121931 | CRITICAL | 9.1 | — | Nov 4, 2026 | A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is the function system of th... |
| CVE-2026-121930 | CRITICAL | 9.1 | — | Nov 4, 2026 | A weakness has been identified in Linksys WRT54GL 4.30.18. The affected element is the function system of the file apply... |
| CVE-2026-121929 | LOW | 3.5 | — | Nov 4, 2026 | A security flaw has been discovered in EmpireSoft EmpireCMS up to 8.0. Impacted is an unknown function of the file /e/me... |
| CVE-2026-121928 | LOW | 3.5 | — | Nov 4, 2026 | A vulnerability was identified in InfiniFlow RAGFlow up to 0.27.2. This issue affects some unknown processing of the fil... |
| CVE-2026-113783 | HIGH | 7.4 | — | Nov 4, 2026 | ESP-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.2.3 until 5.3.7, 5.4.5, 5.5.6, and 6.0.3... |