CVE Vulnerability Database
Search and browse 420,032 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-122134 | HIGH | 8.8 | — | Nov 4, 2026 | Mistral Vibe before 2.25.7 contains a remote code execution vulnerability that allows attackers to run commands by confi... |
| CVE-2026-122133 | HIGH | 8.8 | 0.4% | Nov 4, 2026 | Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute c... |
| CVE-2026-122132 | MEDIUM | 6.1 | 0.3% | Nov 4, 2026 | go-chi chi 5.2.2 through 5.5.0 contains an open redirect vulnerability in the RedirectSlashes middleware that allows att... |
| CVE-2026-122131 | LOW | 3.7 | 0.3% | Nov 4, 2026 | Joi 17.13.6 before 17.13.9 and 18.2.5 before 18.3.1 contains a prototype pollution vulnerability in lib/messages.js comp... |
| CVE-2026-122130 | HIGH | 8.2 | 0.3% | Nov 4, 2026 | CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer overflow vulnerability in the Forwarder output plugin that allow... |
| CVE-2026-122129 | MEDIUM | 5.3 | 0.4% | Nov 4, 2026 | CESNET ipfixcol2 2.7.1 before 2.9.0 contains a memory allocation vulnerability in Lz4Decoder::read_start_header() that a... |
| CVE-2026-122127 | HIGH | 7.5 | 0.4% | Nov 4, 2026 | CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that allows unauthenticated ... |
| CVE-2026-122126 | MEDIUM | 5.9 | 0.4% | Nov 4, 2026 | reSIProcate reTurn client through 1.14.0 contains a heap buffer overflow in TurnTcpSocket::handleReadHeader(), which Tur... |
| CVE-2026-122014 | MEDIUM | 6.3 | — | Nov 4, 2026 | A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function load_sft_model of the file... |
| CVE-2026-122013 | CRITICAL | 10 | — | Nov 4, 2026 | A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an unknown functionality o... |
| CVE-2026-122009 | HIGH | 7.3 | — | Nov 4, 2026 | A flaw has been found in DataLinkDC Dinky up to 1.2.5. This vulnerability affects the function FlinkWebURITemplateProxyS... |
| CVE-2026-121969 | MEDIUM | 6.5 | 0.3% | Nov 4, 2026 | netrek-client-cow through 3.3.3 contains a stack-based buffer overflow vulnerability in handleSMessage() in short.c that... |
| CVE-2026-121968 | MEDIUM | 6.5 | 0.3% | Nov 4, 2026 | Netrek-client-cow through 3.3.3 contains an out-of-bounds read vulnerability in short.c handleSMessage() that allows mal... |
| CVE-2026-11724 | HIGH | 8.5 | 0.3% | Nov 4, 2026 | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1... |
| CVE-2026-11376 | HIGH | 8.8 | 0.3% | Nov 4, 2026 | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1... |
| CVE-2026-116376 | LOW | 3.4 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct a phishing attack d... |
| CVE-2026-115762 | MEDIUM | 6.1 | — | Nov 4, 2026 | draw.io is a configurable diagramming and whiteboarding application. Prior to 31.1.5, the GraphML decoder contains a pro... |
| CVE-2026-115758 | HIGH | 8.2 | — | Nov 4, 2026 | SumatraPDF is a multi-format reader for Windows. In version 3.6.1 and earlier, HttpGet() in src/base/Http_win.cpp uncond... |
| CVE-2026-110283 | MEDIUM | 4.3 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to cause a denial of service d... |
| CVE-2026-110282 | MEDIUM | 6.5 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restriction... |
| CVE-2026-110281 | MEDIUM | 5.9 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly validates TLS certificate validation, which could allow an atta... |
| CVE-2026-10859 | HIGH | 7.5 | 0.3% | Nov 4, 2026 | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1... |
| CVE-2026-108910 | MEDIUM | 4.3 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive informatio... |
| CVE-2026-108838 | LOW | 3.3 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a local attacker to cause a denial of service due to uncontrol... |
| CVE-2026-108767 | MEDIUM | 4.3 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct HTTP response split... |