CVE Vulnerability Database
Search and browse 419,817 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-113782 | HIGH | 7.1 | — | Nov 4, 2026 | ESP-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.2.0 until 5.2.8, 5.3.6, 5.4.5, 5.5.5, an... |
| CVE-2026-113780 | CRITICAL | 9.3 | 0.1% | Nov 4, 2026 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.5.5 until 5.5.6, 6.0.4, and 6.1.1, the e... |
| CVE-2026-107846 | CRITICAL | 9.3 | — | Nov 4, 2026 | bitcoinjs-lib is a JavaScript Bitcoin library for Node.js and browsers. From 2.3.0 until 5.2.1, 6.1.8, and 7.0.2, fastMe... |
| CVE-2026-102345 | MEDIUM | 5.1 | — | Nov 4, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the new Vue-based ticket interface c... |
| CVE-2026-57853 | HIGH | 8.8 | 0.6% | Nov 4, 2026 | DataGerry before 3.3.0 contains a server-side template injection vulnerability that allows authenticated attackers with ... |
| CVE-2026-122118 | HIGH | 7.4 | — | Nov 4, 2026 | In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with... |
| CVE-2026-122116 | MEDIUM | 4.3 | — | Nov 4, 2026 | Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X ... |
| CVE-2026-122054 | MEDIUM | 5.9 | — | Nov 4, 2026 | Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU ... |
| CVE-2026-121971 | HIGH | 8.2 | 0.2% | Nov 4, 2026 | The component ScopingHttpClient in Symfony HttpClient merges the options of its default scope (such as auth_bearer or au... |
| CVE-2026-121927 | MEDIUM | 6.3 | — | Nov 4, 2026 | A vulnerability has been found in InfiniFlow RAGFlow up to 0.27.3. Affected by this issue is the function _account_get o... |
| CVE-2026-76506 | HIGH | 7.6 | 1.4% | Nov 4, 2026 | A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote... |
| CVE-2026-76419 | MEDIUM | 6.1 | 0.3% | Nov 4, 2026 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Uni... |
| CVE-2026-20241 | MEDIUM | 5.3 | 0.2% | Nov 4, 2026 | A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Co... |
| CVE-2026-121926 | HIGH | 7.3 | — | Nov 4, 2026 | A vulnerability was detected in yezhihao jt808-server up to a07f68c466b560b97ef41edb8a4966469abdf83e. Affected is the fu... |
| CVE-2026-119749 | HIGH | 7.5 | — | Nov 4, 2026 | The GetPaid plugin for WordPress before 2.8.63 contains an improper input validation vulnerability that allows unauthent... |
| CVE-2026-119748 | MEDIUM | 6.5 | — | Nov 4, 2026 | The GetPaid plugin for WordPress before 2.8.63 contains an authorization bypass vulnerability that allows unauthenticate... |
| CVE-2026-119747 | HIGH | 7.1 | — | Nov 4, 2026 | The GetPaid plugin for WordPress before 2.8.63 contains an incorrect authorization vulnerability where the check_post_pe... |
| CVE-2026-92704 | HIGH | 8.3 | — | Nov 4, 2026 | SharpEmu is an experimental PlayStation 5 emulator for Windows and Linux. In version 0.0.3-release.3 and earlier, the re... |
| CVE-2026-91168 | MEDIUM | 6.8 | — | Nov 4, 2026 | Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. From 0.21.0 until 0.29.0, the Kubernetes reques... |
| CVE-2026-91163 | LOW | 3.7 | — | Nov 4, 2026 | Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, the Kubernetes protocol listen... |
| CVE-2026-122032 | MEDIUM | 6.5 | — | Nov 4, 2026 | SPIP before 4.4.29 contains a SQL injection vulnerability that allows authenticated attackers with back-office access to... |
| CVE-2026-121967 | MEDIUM | 4.9 | — | Nov 4, 2026 | Coder 2.28.0 before 2.29.22, 2.30.0 before 2.34.13, 2.35.0 before 2.35.10, 2.36.0 before 2.36.8, 2.37.0 before 2.37.5, a... |
| CVE-2026-121966 | HIGH | 8.7 | — | Nov 4, 2026 | Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (and, in 3.7, Ingress NGINX auth-url requ... |
| CVE-2026-121965 | MEDIUM | 5.3 | — | Nov 4, 2026 | Parse Server before 8.6.113 and 9.0.0 before 9.10.6-alpha.5 contains a prototype pollution vulnerability when building o... |
| CVE-2026-121964 | HIGH | 7.5 | — | Nov 4, 2026 | FreeRDP before 3.32.2 contains a heap-based buffer overflow in the RD Gateway RPC client, where rpc_client_recv_fragment... |