CVE Vulnerability Database
Search and browse 419,323 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-123198 | CRITICAL | 9.8 | — | Nov 5, 2026 | LMFDB before commit 01829bd contains a server-side template injection vulnerability in the render_knowl function that al... |
| CVE-2026-123197 | MEDIUM | 5.3 | — | Nov 5, 2026 | WPPConnect Server through 2.10.76 contains a missing authentication vulnerability that allows unauthenticated attackers ... |
| CVE-2026-123196 | HIGH | 8.1 | — | Nov 5, 2026 | Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unauthenticated attackers to contr... |
| CVE-2026-123135 | MEDIUM | 6.3 | — | Nov 5, 2026 | A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2. Affected by this vulnerability is an unknown fun... |
| CVE-2026-118494 | HIGH | 8.2 | — | Nov 5, 2026 | Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9 - JRev... |
| CVE-2026-116574 | MEDIUM | 5.9 | — | Nov 5, 2026 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to ... |
| CVE-2026-116573 | MEDIUM | 6.5 | — | Nov 5, 2026 | FreeSWITCH is an open-source software telecommunications platform. From 1.10.0 until 1.11.1, a stack-based buffer overfl... |
| CVE-2026-116472 | LOW | 2.7 | — | Nov 5, 2026 | A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause ... |
| CVE-2026-115451 | MEDIUM | 6.5 | — | Nov 5, 2026 | Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension 2.8.13-... |
| CVE-2026-100365 | HIGH | 8.8 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-100364 | HIGH | 7.1 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-100363 | HIGH | 8.8 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-100362 | MEDIUM | 6.9 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-100361 | HIGH | 7.1 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-100360 | HIGH | 7.1 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-100359 | MEDIUM | 6.5 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-100358 | CRITICAL | 9.4 | — | Nov 5, 2026 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.... |
| CVE-2026-97847 | HIGH | 7.1 | — | Nov 5, 2026 | A flaw was found in the protocol mapper and identity resolution components of Keycloak. The issue occurs when a client m... |
| CVE-2026-97175 | HIGH | 8.8 | — | Nov 5, 2026 | A flaw was found in the idp-auto-link authenticator of the keycloak-services component, which handles user identity fede... |
| CVE-2026-97174 | MEDIUM | 6.8 | — | Nov 5, 2026 | A flaw was found in the Client-Initiated Backchannel Authentication (CIBA) implementation of Keycloak. The CIBA endpoint... |
| CVE-2026-96453 | HIGH | 8 | — | Nov 5, 2026 | A flaw was found in the Keycloak Admin CLI kcadm tool, which is used by administrators to manage Keycloak servers from t... |
| CVE-2026-93998 | HIGH | 7.4 | — | Nov 5, 2026 | A flaw was found in the SAML adapter component of Keycloak, which is used to secure applications with SAML-based authent... |
| CVE-2026-92857 | HIGH | 8.1 | — | Nov 5, 2026 | Keycloak provides a Dynamic Client Registration feature that allows users with specific tokens to register their own app... |
| CVE-2026-92855 | HIGH | 7.4 | — | Nov 5, 2026 | A flaw was found in the SAML identity broker component of Keycloak, which is used to delegate authentication to external... |
| CVE-2026-77439 | HIGH | 8.8 | — | Nov 5, 2026 | Immich is a self-hosted photo and video management solution. Prior to 3.0.3, an authenticated user with editor access to... |