CVE Vulnerability Database
Search and browse 419,817 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-121937 | LOW | 3.1 | — | Nov 4, 2026 | loonflow before r3.2.3 contains a missing authorization vulnerability in TicketFlowHistoryView that allows any authentic... |
| CVE-2026-121936 | MEDIUM | 6.5 | — | Nov 4, 2026 | easyVoice before 0.0.23 contains a server-side request forgery vulnerability that allows unauthenticated attackers to ma... |
| CVE-2026-121620 | MEDIUM | 6.5 | — | Nov 4, 2026 | CoopCycle coopcycle-web 5.6.0 before 6.20.0 contains a missing authentication vulnerability that allows unauthenticated ... |
| CVE-2026-121373 | MEDIUM | 5.3 | 0.5% | Nov 4, 2026 | The Symfony HtmlSanitizer component MetaRefreshAttributeSanitizer, introduced to fix CVE-2026-48761, sanitizes the refre... |
| CVE-2026-121147 | HIGH | 8.5 | 0.1% | Nov 4, 2026 | This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to improper implementation of SSL certificat... |
| CVE-2026-121146 | MEDIUM | 6.8 | 0.1% | Nov 4, 2026 | This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to the recording of authentication tokens in... |
| CVE-2026-121145 | HIGH | 7.1 | 0.2% | Nov 4, 2026 | This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to insufficient validation of URLs and origi... |
| CVE-2026-121144 | HIGH | 8.8 | 0.3% | Nov 4, 2026 | This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to presence of hardcoded service account cre... |
| CVE-2026-119481 | CRITICAL | 9.8 | — | Nov 4, 2026 | Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Privilege Escalation.Thi... |
| CVE-2026-119468 | HIGH | 7.1 | — | Nov 4, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noptin Newsletter ... |
| CVE-2026-118516 | MEDIUM | 6.3 | 0.4% | Nov 4, 2026 | The Symfony Routing components CompiledUrlMatcher and UrlMatcher interpret the host and path information differently, al... |
| CVE-2026-118513 | HIGH | 7.7 | 0.3% | Nov 4, 2026 | Authentication bypass by spoofing in X509Authenticator and X509AuthenticationListener of Symfony versions prior to 5.4.5... |
| CVE-2026-107479 | LOW | 1.7 | 0.2% | Nov 4, 2026 | An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module im... |
| CVE-2026-97397 | HIGH | 7.2 | — | Nov 4, 2026 | The Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance plugin for WordPress is vulner... |
| CVE-2026-59267 | HIGH | 7.8 | 0.2% | Nov 4, 2026 | A crafted DXF document causes a heap buffer overflow in Draw in Apache OpenOffice 4.1.16 and earlier. This could cause a... |
| CVE-2026-121925 | MEDIUM | 6.6 | 0.6% | Nov 4, 2026 | A stack-based buffer overflow in libsnowflakeclient and the Snowflake PHP PDO Driver could, under specific conditions, r... |
| CVE-2026-114456 | MEDIUM | 6.5 | 0.2% | Nov 4, 2026 | Multiple Snowflake client drivers implementing the `authenticator=externalbrowser` single sign-on flow could have allowe... |
| CVE-2026-104799 | HIGH | 8.8 | — | Nov 4, 2026 | The Mobile builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.... |
| CVE-2026-90634 | HIGH | 7.3 | — | Nov 4, 2026 | An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF t... |
| CVE-2026-90632 | MEDIUM | 5.5 | — | Nov 4, 2026 | Apache OpenOffice documents can include multimedia content (audio, video, etc.) A crafted document could exploit the GS... |
| CVE-2026-90631 | LOW | 3.3 | — | Nov 4, 2026 | Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an att... |
| CVE-2026-90629 | HIGH | 7.3 | — | Nov 4, 2026 | An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.16 allows a crafted WMF f... |
| CVE-2026-90628 | HIGH | 7.3 | — | Nov 4, 2026 | An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.16 allows a crafted CFF f... |
| CVE-2026-90627 | MEDIUM | 5.5 | 0.2% | Nov 4, 2026 | The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted document to read the content... |
| CVE-2026-90626 | HIGH | 7.3 | 0.2% | Nov 4, 2026 | An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF t... |