CVE Vulnerability Database
Search and browse 420,055 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-114420 | MEDIUM | 6.9 | — | Nov 4, 2026 | SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated account-select... |
| CVE-2026-62126 | HIGH | 7.5 | 0.3% | Nov 4, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in miniOrange SAML SP Single Sign On miniorange-saml-... |
| CVE-2026-62007 | HIGH | 7.1 | 0.1% | Nov 4, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements... |
| CVE-2026-57775 | MEDIUM | 5.3 | 0.2% | Nov 4, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in RelyWP Simple Cloudflare Turnstile simple-clou... |
| CVE-2026-57666 | HIGH | 7.1 | 0.1% | Nov 4, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aguila Technologie... |
| CVE-2026-57639 | HIGH | 7.1 | 0.1% | Nov 4, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roland Murg WP Boo... |
| CVE-2026-56065 | HIGH | 7.5 | 0.2% | Nov 4, 2026 | Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Doofinder Doofinder for... |
| CVE-2026-54861 | HIGH | 7.1 | 0.1% | Nov 4, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aguila Technologie... |
| CVE-2026-119477 | HIGH | 7.1 | 0.1% | Nov 4, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jacob N. Breetvelt... |
| CVE-2026-119366 | HIGH | 7.1 | 0.1% | Nov 4, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AdvancedCoding wpD... |
| CVE-2026-110944 | LOW | 2.7 | 0.3% | Nov 4, 2026 | Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server. |
| CVE-2026-62000 | HIGH | 7.5 | 0.2% | Nov 4, 2026 | Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrect... |
| CVE-2026-54851 | HIGH | 7.1 | 0.1% | Nov 4, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Awesomemotive Cont... |
| CVE-2026-121818 | HIGH | 7.8 | 0.1% | Nov 4, 2026 | Herowatch Mini developed by About Time Technologies has a system signing vulnerability. Authenticated local attackers ca... |
| CVE-2026-121817 | HIGH | 7.5 | 0.4% | Nov 4, 2026 | Herowatch Go Server developed by About Time Technologies has a Insecure Direct Object Reference vulnerability. Authentic... |
| CVE-2026-121816 | HIGH | 8.8 | 0.4% | Nov 4, 2026 | Herowatch Mini developed by About Time Technologies has a Missing Authentication vulnerability. Unauthenticated remote a... |
| CVE-2026-87044 | MEDIUM | 6.5 | — | Nov 4, 2026 | The Mbed TLS crypto shim driver in drivers/crypto/crypto_mbedtls_shim.c drives PSA multipart cipher and AEAD operations.... |
| CVE-2026-87043 | MEDIUM | 4.8 | — | Nov 4, 2026 | The entropy-device random number generator in subsys/random/random_entropy_device.c returned early with -ENODEV from ran... |
| CVE-2026-87041 | HIGH | 7.8 | — | Nov 4, 2026 | The RTIO submission-queue verifier rtio_vrfy_sqe() in subsys/rtio/rtio_syscalls.c (subsys/rtio/rtio_handlers.c before v4... |
| CVE-2026-87040 | HIGH | 8.3 | — | Nov 4, 2026 | The nRF link-layer receive paths of the open-source Bluetooth LE Controller did not validate the on-air LENGTH field of ... |
| CVE-2026-87039 | HIGH | 7.8 | — | Nov 4, 2026 | The user-mode syscall verifier z_vrfy_i2s_configure() in drivers/i2s/i2s_handlers.c copies the caller's struct i2s_confi... |
| CVE-2026-87038 | HIGH | 7 | — | Nov 4, 2026 | The user-mode verification handler for the i3c_transfer() system call, z_vrfy_i3c_transfer() in drivers/i3c/i3c_handlers... |
| CVE-2026-85036 | MEDIUM | 5.7 | — | Nov 4, 2026 | The Bluetooth Classic AVDTP layer defers releasing a session's stream endpoints: bt_avdtp_l2cap_disconnected() in subsys... |
| CVE-2026-77779 | HIGH | 7.7 | 0.5% | Nov 4, 2026 | ManageEngine Key Manager Plus versions before 7151 were vulnerable to an Improper Access Control vulnerability that allo... |
| CVE-2026-77690 | HIGH | 8.8 | 15.6% | Nov 4, 2026 | ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulnerable to a Command Injection vulnerability that al... |