CVE Vulnerability Database
Search and browse 419,817 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-121638 | CRITICAL | 9.1 | 0.3% | Nov 4, 2026 | An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path netw... |
| CVE-2026-121637 | HIGH | 8.9 | 0.3% | Nov 4, 2026 | An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a n... |
| CVE-2026-121632 | — | — | — | Nov 4, 2026 | Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escaping. proce... |
| CVE-2026-121009 | — | — | — | Nov 4, 2026 | SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip the injection_guard check for function names given ... |
| CVE-2026-121008 | — | — | — | Nov 4, 2026 | SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-site scripting via unescaped SQL text and bind valu... |
| CVE-2026-121007 | — | — | — | Nov 4, 2026 | SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow SQL injection via the where values of a nested sta... |
| CVE-2026-120421 | MEDIUM | 6.1 | — | Nov 4, 2026 | In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0.0-M11, when URL client ... |
| CVE-2026-119776 | MEDIUM | 6.1 | — | Nov 4, 2026 | In all prior released versions of FRRouting, the OSPFv3 (for IPv6) implementation does not check that OSPFv3 packets hav... |
| CVE-2026-114627 | — | — | — | Nov 4, 2026 | Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted strings in HTML::Tags ou... |
| CVE-2026-100408 | MEDIUM | 4.4 | — | Nov 4, 2026 | Git for Windows is the Windows port of Git. From 2.43.0.windows.1 until 2.55.0.windows.3, when a matching git:* credenti... |
| CVE-2026-100407 | MEDIUM | 4.4 | 0.1% | Nov 4, 2026 | Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the git-credential-wincred sto... |
| CVE-2026-121993 | MEDIUM | 4.3 | — | Nov 4, 2026 | wePOS (Point Of Sale for WooCommerce) before 2.0.3 contains a missing authorization vulnerability in the wepos/v1/paymen... |
| CVE-2026-119745 | MEDIUM | 4.3 | — | Nov 4, 2026 | Sender plugin for WordPress before 2.11.3 contains a missing authorization vulnerability that allows any authenticated u... |
| CVE-2026-118391 | HIGH | 8.9 | 0.5% | Nov 4, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an unauthenticated remote ... |
| CVE-2026-65555 | CRITICAL | 9.8 | — | Nov 4, 2026 | Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allo... |
| CVE-2026-121970 | LOW | 3.7 | — | Nov 4, 2026 | Pay with Vipps and MobilePay for WooCommerce (woo-vipps) before 6.4.1 contains an improper cryptographic signature verif... |
| CVE-2026-121946 | HIGH | 7.2 | — | Nov 4, 2026 | zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a CRLF header injection vulnerability in message-bu... |
| CVE-2026-121945 | HIGH | 7.6 | — | Nov 4, 2026 | CoopCycle coopcycle-web before 6.20.1 contains a broken access control vulnerability that allows any courier to read and... |
| CVE-2026-121944 | MEDIUM | 5.5 | — | Nov 4, 2026 | sngrep through 1.9.0 contains an infinite loop vulnerability in capture_packet_reasm_ip() in src/capture.c that allows a... |
| CVE-2026-121943 | MEDIUM | 4.8 | — | Nov 4, 2026 | Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sip_check_packet and sip_validate_pac... |
| CVE-2026-121942 | MEDIUM | 6.1 | — | Nov 4, 2026 | ZBar through 0.23.95 contains an out-of-bounds read vulnerability in _zbar_sq_decode() in zbar/sqcode.c that allows atta... |
| CVE-2026-121941 | HIGH | 7.8 | — | Nov 4, 2026 | libmt32emu before 2.8.4 contains a heap buffer overflow vulnerability in MidiStreamParserImpl::parseSysex that allows at... |
| CVE-2026-121940 | HIGH | 8.8 | — | Nov 4, 2026 | Stonewuu ai-fusion-video before 1.3.0 contains an insecure direct object reference vulnerability that allows authenticat... |
| CVE-2026-121939 | HIGH | 8.1 | — | Nov 4, 2026 | Databasement before 1.10.9 contains an authentication bypass vulnerability in OAuthService::findOrCreateLocalUser() that... |
| CVE-2026-121938 | MEDIUM | 5.3 | — | Nov 4, 2026 | langchain4j-aideepin before 3.31.0 contains an insecure direct object reference vulnerability that allows authenticated ... |