CVE Vulnerability Database
Search and browse 420,032 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-76506 | HIGH | 7.6 | 1.4% | Nov 4, 2026 | A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote... |
| CVE-2026-76419 | MEDIUM | 6.1 | 0.3% | Nov 4, 2026 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Uni... |
| CVE-2026-20241 | MEDIUM | 5.3 | 0.2% | Nov 4, 2026 | A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Co... |
| CVE-2026-121926 | HIGH | 7.3 | — | Nov 4, 2026 | A vulnerability was detected in yezhihao jt808-server up to a07f68c466b560b97ef41edb8a4966469abdf83e. Affected is the fu... |
| CVE-2026-119749 | HIGH | 7.5 | — | Nov 4, 2026 | The GetPaid plugin for WordPress before 2.8.63 contains an improper input validation vulnerability that allows unauthent... |
| CVE-2026-119748 | MEDIUM | 6.5 | — | Nov 4, 2026 | The GetPaid plugin for WordPress before 2.8.63 contains an authorization bypass vulnerability that allows unauthenticate... |
| CVE-2026-119747 | HIGH | 7.1 | — | Nov 4, 2026 | The GetPaid plugin for WordPress before 2.8.63 contains an incorrect authorization vulnerability where the check_post_pe... |
| CVE-2026-92704 | HIGH | 8.3 | — | Nov 4, 2026 | SharpEmu is an experimental PlayStation 5 emulator for Windows and Linux. In version 0.0.3-release.3 and earlier, the re... |
| CVE-2026-91168 | MEDIUM | 6.8 | — | Nov 4, 2026 | Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. From 0.21.0 until 0.29.0, the Kubernetes reques... |
| CVE-2026-91163 | LOW | 3.7 | — | Nov 4, 2026 | Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, the Kubernetes protocol listen... |
| CVE-2026-122032 | MEDIUM | 6.5 | — | Nov 4, 2026 | SPIP before 4.4.29 contains a SQL injection vulnerability that allows authenticated attackers with back-office access to... |
| CVE-2026-121967 | MEDIUM | 4.9 | — | Nov 4, 2026 | Coder 2.28.0 before 2.29.22, 2.30.0 before 2.34.13, 2.35.0 before 2.35.10, 2.36.0 before 2.36.8, 2.37.0 before 2.37.5, a... |
| CVE-2026-121966 | HIGH | 8.7 | — | Nov 4, 2026 | Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (and, in 3.7, Ingress NGINX auth-url requ... |
| CVE-2026-121965 | MEDIUM | 5.3 | — | Nov 4, 2026 | Parse Server before 8.6.113 and 9.0.0 before 9.10.6-alpha.5 contains a prototype pollution vulnerability when building o... |
| CVE-2026-121964 | HIGH | 7.5 | — | Nov 4, 2026 | FreeRDP before 3.32.2 contains a heap-based buffer overflow in the RD Gateway RPC client, where rpc_client_recv_fragment... |
| CVE-2026-121963 | MEDIUM | 5.9 | 0.3% | Nov 4, 2026 | FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronous dynamic rdpsnd channel that allows mal... |
| CVE-2026-121962 | HIGH | 8.1 | 0.3% | Nov 4, 2026 | FreeRDP before 3.32.2 contains a heap buffer overflow in transport_default_read_pdu when handling partial Early User Aut... |
| CVE-2026-121961 | MEDIUM | 5.9 | 0.3% | Nov 4, 2026 | FreeRDP before 3.32.2 contains a use-after-free vulnerability in the freerdp-proxy DRDYNVC tracker when intercepting the... |
| CVE-2026-121960 | HIGH | 7.5 | 0.5% | Nov 4, 2026 | FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow server when a CredSSP TSReque... |
| CVE-2026-121959 | MEDIUM | 6.5 | 0.3% | Nov 4, 2026 | FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocket_context_read that fails to handle a zero BIO ... |
| CVE-2026-121958 | HIGH | 7.5 | 0.3% | Nov 4, 2026 | FreeRDP through 3.32.1 has a heap out-of-bounds write in the RDPGFX client because the delete_surface callback truncates... |
| CVE-2026-121957 | HIGH | 7 | 0.3% | Nov 4, 2026 | FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP servers to corrupt client memory... |
| CVE-2026-121956 | HIGH | 7.5 | 0.4% | Nov 4, 2026 | FreeRDP before 3.32.2 contains a double free in the WinPR Kerberos SSPI retrieveSomeTgt function, which installs the krb... |
| CVE-2026-121955 | MEDIUM | 6.5 | 0.4% | Nov 4, 2026 | FreeRDP before 3.32.2 contains a use-after-free vulnerability in Emulate_SCardReleaseContext that frees the emulated SCa... |
| CVE-2026-121954 | MEDIUM | 6.5 | 0.4% | Nov 4, 2026 | FreeRDP before 3.32.2 has a heap out-of-bounds write in the planar codec because freerdp_bitmap_planar_context_reset com... |