CVE Vulnerability Database
Search and browse 420,032 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108588 | MEDIUM | 5.4 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restriction... |
| CVE-2026-108536 | MEDIUM | 4.6 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restriction... |
| CVE-2026-105991 | LOW | 3.5 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restriction... |
| CVE-2026-105702 | MEDIUM | 4.3 | — | Nov 4, 2026 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive informatio... |
| CVE-2026-104203 | HIGH | 7.5 | — | Nov 4, 2026 | Traccar is an open source GPS tracking system. From 5.1 until 6.15.0, WebModule.java's MediaFilter Guice mapping and Web... |
| CVE-2026-102664 | HIGH | 7.1 | — | Nov 4, 2026 | ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. Prior to 3.0.10, 3.1.10, and 4.0.10, decompress_mysq... |
| CVE-2026-102340 | HIGH | 8.5 | — | Nov 4, 2026 | Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the Traffic Ma... |
| CVE-2026-102339 | HIGH | 8.2 | — | Nov 4, 2026 | Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the Traffic Ma... |
| CVE-2025-71457 | CRITICAL | 9.8 | 0.4% | Nov 4, 2026 | vtenext 25.02 before 25.02.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to ch... |
| CVE-2025-71456 | HIGH | 8.1 | 0.3% | Nov 4, 2026 | vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users to inject ... |
| CVE-2025-71455 | MEDIUM | 5.3 | 0.3% | Nov 4, 2026 | vtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attackers to read the PHPSESSI... |
| CVE-2025-71454 | MEDIUM | 6.5 | 0.2% | Nov 4, 2026 | vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrf_check() in include/utils/Vte... |
| CVE-2025-71453 | MEDIUM | 6.1 | 0.2% | Nov 4, 2026 | vtenext before 25.02.2 contains a reflected cross-site scripting vulnerability in modules/Home/HomeWidgetBlockList.php t... |
| CVE-2026-97705 | HIGH | 7.5 | 0.4% | Nov 4, 2026 | Moleculer is a progressive microservices framework for Node.js. Prior to 0.14.36 and 0.15.2, Parser._write in src/transp... |
| CVE-2026-76806 | MEDIUM | 6.3 | — | Nov 4, 2026 | Solidtime is an open-source time-tracking app. Prior to 0.16.0, TogglDataImporter::importData() read attacker-controlled... |
| CVE-2026-122220 | HIGH | 7.4 | 0.3% | Nov 4, 2026 | WPO365 | LOGIN (wpo365-login) plugin before version 45.2 contains an authentication bypass by capture-replay vulnerabili... |
| CVE-2026-122192 | HIGH | 7.5 | — | Nov 4, 2026 | Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with r... |
| CVE-2026-121933 | CRITICAL | 10 | — | Nov 4, 2026 | A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function save_settings of the file /wizard/apply.cgi... |
| CVE-2026-115574 | MEDIUM | 5.3 | 0.7% | Nov 4, 2026 | Zulip is an open-source team collaboration tool. From 11.0 until 12.2, organizations with web-public channels enabled ex... |
| CVE-2026-115474 | MEDIUM | 6.5 | 0.3% | Nov 4, 2026 | Zulip is an open-source team collaboration tool. From 8.0 until 12.2, in organizations where the Who can view all other ... |
| CVE-2026-113374 | HIGH | 8.6 | 0.3% | Nov 4, 2026 | Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. ... |
| CVE-2026-113373 | CRITICAL | 9.1 | 0.2% | Nov 4, 2026 | Sonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML o... |
| CVE-2026-113372 | HIGH | 7.1 | 0.2% | Nov 4, 2026 | Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds ... |
| CVE-2026-113371 | HIGH | 7.1 | 0.2% | Nov 4, 2026 | Sonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repository, through an internal REST endpoin... |
| CVE-2026-113370 | HIGH | 7.7 | 0.2% | Nov 4, 2026 | Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional "Reindex Search Tables By Pattern" ta... |