CVE Vulnerability Database
Search and browse 419,322 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-63218 | MEDIUM | 6.5 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-63217 | MEDIUM | 6.5 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-63215 | HIGH | 8.3 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-63214 | HIGH | 8.8 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-63213 | HIGH | 7.2 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-63111 | HIGH | 7.1 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-61653 | HIGH | 8.3 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-61651 | HIGH | 8.3 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-61650 | HIGH | 8.1 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-61649 | HIGH | 7.7 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-61648 | HIGH | 8.3 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-123273 | MEDIUM | 6.5 | — | Nov 5, 2026 | ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthen... |
| CVE-2026-123272 | HIGH | 8 | — | Nov 5, 2026 | Mark3labs mcp-go before v1.2.1 contains an improper validation vulnerability in OAuthHandler.fetchServerMetadata that al... |
| CVE-2026-123271 | HIGH | 8 | — | Nov 5, 2026 | ChatCLI before v1.215.2 contains an improper validation vulnerability in the MCP OAuth login flow that uses server-suppl... |
| CVE-2026-123208 | HIGH | 8.8 | — | Nov 5, 2026 | noname Electron desktop build v1.11.2 through v1.11.6.1 contains an unauthenticated local file server with wildcard CORS... |
| CVE-2026-123207 | LOW | 3.1 | — | Nov 5, 2026 | LibreTV before v2.21.2 contains a server-side request forgery vulnerability that allows authenticated users to bypass ch... |
| CVE-2026-123206 | LOW | 3.7 | — | Nov 5, 2026 | EdgeChat before 2.20.3 contains a missing authentication vulnerability in the GET /files/:key route that allows unauthen... |
| CVE-2026-123205 | MEDIUM | 6.5 | — | Nov 5, 2026 | accel-ppp before 1.15.0 contains a heap buffer overflow vulnerability in the tcp, syslog and pgsql log targets that allo... |
| CVE-2026-123204 | MEDIUM | 4.3 | — | Nov 5, 2026 | Posta before v0.18.0 contains a server-side request forgery vulnerability that allows authenticated users with edit righ... |
| CVE-2026-123203 | MEDIUM | 6.1 | — | Nov 5, 2026 | NEURON (CoreNEURON) through 9.0.2 contains a stack buffer overflow vulnerability that allows attackers to corrupt stack ... |
| CVE-2026-123202 | HIGH | 7.5 | — | Nov 5, 2026 | libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxml_parser.c that allows remote attac... |
| CVE-2026-123201 | MEDIUM | 5.3 | — | Nov 5, 2026 | Buku (bukuserver) through 5.1.1 contains an unauthenticated server-side request forgery vulnerability that allows remote... |
| CVE-2026-123200 | HIGH | 7.5 | — | Nov 5, 2026 | VRPN through 07.36 contains an out-of-bounds stack write vulnerability in vrpn_Endpoint::handle_sender_message() and han... |
| CVE-2026-123199 | MEDIUM | 5.5 | — | Nov 5, 2026 | eBook-speaker 6.1.0 through 6.2.0 contains a stack buffer overflow vulnerability in get_attributes() in src/common.c cau... |
| CVE-2026-123198 | CRITICAL | 9.8 | — | Nov 5, 2026 | LMFDB before commit 01829bd contains a server-side template injection vulnerability in the render_knowl function that al... |