CVE Vulnerability Database
Search and browse 420,055 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-100252 | HIGH | 8.6 | — | Nov 4, 2026 | Improper Authorization vulnerability in Apache ZooKeeper. When SASL authentication is enabled on the client port, the s... |
| CVE-2026-100235 | MEDIUM | 6 | 0.3% | Nov 4, 2026 | Incorrect authorization due to a time-of-check to time-of-use (TOCTOU) race condition in the setACL request handling of ... |
| CVE-2026-95649 | MEDIUM | 6.1 | — | Nov 4, 2026 | IRISPowerscan insufficiently restrict the use of untrusted scripts. An authenticated user with access to script function... |
| CVE-2026-94460 | HIGH | 7.2 | — | Nov 4, 2026 | IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated pri... |
| CVE-2026-94459 | HIGH | 7.2 | — | Nov 4, 2026 | IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an ... |
| CVE-2026-93900 | MEDIUM | 6.4 | 0.3% | Nov 4, 2026 | The Simple CAPTCHA with Cloudflare Turnstile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '... |
| CVE-2026-120554 | HIGH | 8.8 | 0.6% | Nov 4, 2026 | The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up ... |
| CVE-2026-120422 | HIGH | 8.9 | 0.4% | Nov 4, 2026 | Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe compo... |
| CVE-2026-115498 | HIGH | 7.2 | 0.5% | Nov 4, 2026 | The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'g<PAGE_ID>-website (Website ... |
| CVE-2026-111822 | — | — | — | Nov 4, 2026 | Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ, Apache ActiveMQ Runtime Config. Afte... |
| CVE-2026-111821 | — | — | — | Nov 4, 2026 | Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. A user can create a durable subsc... |
| CVE-2026-111040 | MEDIUM | 5.1 | — | Nov 4, 2026 | The platform allows persistent HTML injection into editable fields managed by TinyMCE. An authenticated attacker with lo... |
| CVE-2026-111038 | HIGH | 7.3 | — | Nov 4, 2026 | CSV formula injection vulnerability in the export functionality of the Coupa Supplier Portal SaaS platform. The vulnerab... |
| CVE-2026-111037 | MEDIUM | 5.1 | — | Nov 4, 2026 | A reflected Cross-Site Scripting (XSS) vulnerability in the Tenders module of the Coupa Supplier Portal SaaS platform. T... |
| CVE-2026-111036 | HIGH | 8.4 | — | Nov 4, 2026 | Server-side request forgery (SSRF) vulnerability in the Coupa Supplier Portal SaaS platform, specifically in the documen... |
| CVE-2026-110935 | HIGH | 8.4 | 0.2% | Nov 4, 2026 | The PFI plugin framework deployment routine does not validate path components when extracting archive entries to the loc... |
| CVE-2026-110022 | HIGH | 8.4 | 0.1% | Nov 4, 2026 | The PFI plugin framework deploys executable assemblies (DLLs) from a signed plugin package into the local plugin reposit... |
| CVE-2026-110021 | MEDIUM | 6.2 | 0.1% | Nov 4, 2026 | PLCnext Engineer checks GSDX manifest reference digests but does not cryptographically verify the XML `SignatureValue` o... |
| CVE-2026-108949 | MEDIUM | 6.5 | — | Nov 4, 2026 | Denial of Service via OOM vulnerability in Apache ActiveMQ, ActiveMQ Broker. An authenticated OpenWire client that se... |
| CVE-2026-19731 | LOW | 3.3 | — | Nov 4, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software ... |
| CVE-2026-19721 | LOW | 3.3 | — | Nov 4, 2026 | Improper restriction of XML external entity reference vulnerability in TÜBİTAK BİLGEM Software Technologies Research Ins... |
| CVE-2026-114426 | HIGH | 8.7 | — | Nov 4, 2026 | SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data before authenticating the... |
| CVE-2026-114425 | CRITICAL | 9.2 | — | Nov 4, 2026 | SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attac... |
| CVE-2026-114424 | CRITICAL | 9.2 | — | Nov 4, 2026 | SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or ... |
| CVE-2026-114421 | HIGH | 8.3 | — | Nov 4, 2026 | SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose ... |