CVE Vulnerability Database
Search and browse 420,032 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-102280 | MEDIUM | 6.9 | 0.1% | Nov 4, 2026 | Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.18.6, a process inside a sandb... |
| CVE-2026-97373 | MEDIUM | 5.8 | — | Nov 4, 2026 | draw.io is a configurable diagramming and whiteboarding application. Prior to 30.3.8, the optional /proxy endpoint conta... |
| CVE-2026-82418 | CRITICAL | 9.8 | — | Nov 4, 2026 | IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to ... |
| CVE-2026-19319 | MEDIUM | 5.3 | — | Nov 4, 2026 | IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information d... |
| CVE-2026-18142 | HIGH | 7.1 | — | Nov 4, 2026 | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1... |
| CVE-2026-17493 | HIGH | 7.5 | — | Nov 4, 2026 | IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to cause a denial of service due ... |
| CVE-2026-16725 | MEDIUM | 6.5 | — | Nov 4, 2026 | IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary f... |
| CVE-2026-14252 | MEDIUM | 6.2 | — | Nov 4, 2026 | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1... |
| CVE-2026-13292 | HIGH | 8.8 | 0.3% | Nov 4, 2026 | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1... |
| CVE-2026-13289 | HIGH | 7.1 | — | Nov 4, 2026 | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1... |
| CVE-2026-13284 | HIGH | 7.1 | — | Nov 4, 2026 | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1... |
| CVE-2026-13271 | HIGH | 8.1 | — | Nov 4, 2026 | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1... |
| CVE-2026-12550 | MEDIUM | 5.4 | — | Nov 4, 2026 | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1... |
| CVE-2026-12538 | MEDIUM | 5.4 | — | Nov 4, 2026 | IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to obtain... |
| CVE-2026-12356 | HIGH | 7.5 | 0.3% | Nov 4, 2026 | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1... |
| CVE-2026-122235 | MEDIUM | 4.7 | — | Nov 4, 2026 | Jan from 0.8.5 before 0.8.8 contains a workspace guard bypass vulnerability in the agent-tools gate.rs that allows attac... |
| CVE-2026-122234 | MEDIUM | 4.7 | — | Nov 4, 2026 | jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers to inject markup by suppl... |
| CVE-2026-122233 | LOW | 3.7 | — | Nov 4, 2026 | FrankenPHP before 1.13.4 contains an information disclosure vulnerability in worker mode that fails to clear last HTTP s... |
| CVE-2026-122224 | HIGH | 8.1 | — | Nov 4, 2026 | WebVirtCloud through commit bb920b0 contains a missing authorization vulnerability that allows low-privileged authentica... |
| CVE-2026-122140 | MEDIUM | 5.8 | — | Nov 4, 2026 | Trawl 1.5.0 before 1.10.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to ... |
| CVE-2026-122139 | MEDIUM | 5.3 | — | Nov 4, 2026 | blueprintUE Self-Hosted Edition before 4.3.3 contains an account enumeration vulnerability in ForgotPasswordMiddleware.p... |
| CVE-2026-122138 | MEDIUM | 5.3 | — | Nov 4, 2026 | BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 contains a login rate limit bypass vulnerability in LoginMiddleware.p... |
| CVE-2026-122137 | MEDIUM | 6.7 | — | Nov 4, 2026 | Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundled gitstatus/install scr... |
| CVE-2026-122136 | MEDIUM | 4.4 | — | Nov 4, 2026 | Powerlevel10k before 1.20.19 contains a symlink following vulnerability in _p9k_dump_instant_prompt that allows local at... |
| CVE-2026-122135 | HIGH | 8.8 | — | Nov 4, 2026 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by abusin... |