CVE Vulnerability Database
Search and browse 420,074 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-120647 | — | — | 0.2% | Nov 4, 2026 | CGI versions before 5.00 for Perl allow Content-Disposition parameter injection via unescaped double quotes in the heade... |
| CVE-2026-120646 | — | — | 0.2% | Nov 4, 2026 | CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbolic refere... |
| CVE-2026-120645 | — | — | 0.4% | Nov 4, 2026 | CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in... |
| CVE-2026-120644 | — | — | 0.2% | Nov 4, 2026 | CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires valu... |
| CVE-2026-120643 | — | — | 0.2% | Nov 4, 2026 | CGI versions from 4.62 before 5.00 for Perl allow cross-site scripting via a raw apostrophe in URLs returned by url and ... |
| CVE-2026-120642 | — | — | 0.2% | Nov 4, 2026 | CGI versions before 5.00 for Perl return request-derived values untainted under taint mode. The upload filename, upload... |
| CVE-2026-120641 | — | — | 0.2% | Nov 4, 2026 | CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths... |
| CVE-2026-120640 | — | — | 0.1% | Nov 4, 2026 | CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDATA and XForms:Model parameters to be set from the ... |
| CVE-2026-120639 | — | — | 0.2% | Nov 4, 2026 | CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in header and ... |
| CVE-2026-120638 | — | — | 0.2% | Nov 4, 2026 | CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation ... |
| CVE-2026-120637 | — | — | 0.2% | Nov 4, 2026 | CGI versions before 5.00 for Perl take request parameters from the process command line arguments for an unrecognised RE... |
| CVE-2026-120636 | — | — | 0.2% | Nov 4, 2026 | CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST_URI in url and s... |
| CVE-2026-120635 | — | — | 0.2% | Nov 4, 2026 | CGI versions before 5.00 for Perl allow form fields to be smuggled past proxies and WAFs via multipart parsing that diff... |
| CVE-2026-120634 | — | — | 0.2% | Nov 4, 2026 | CGI::Carp versions before 5.00 for Perl leak warnings across requests in persistent environments via the warningsToBrows... |
| CVE-2026-120633 | — | — | 0.1% | Nov 4, 2026 | CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self_url, virtual_host and virtual_po... |
| CVE-2026-120632 | — | — | 0.2% | Nov 4, 2026 | CGI versions before 5.00 for Perl allow CPU exhaustion via a backtracking regex on the XForms multipart/related Content-... |
| CVE-2026-120631 | — | — | 0.4% | Nov 4, 2026 | CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used as ... |
| CVE-2026-118628 | HIGH | 8.2 | 0.3% | Nov 4, 2026 | MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote ... |
| CVE-2026-118627 | HIGH | 7.8 | 0.2% | Nov 4, 2026 | MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability all... |
| CVE-2026-118626 | MEDIUM | 5.4 | 0.2% | Nov 4, 2026 | MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote... |
| CVE-2026-118625 | MEDIUM | 6.3 | 0.3% | Nov 4, 2026 | MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attack... |
| CVE-2026-118624 | MEDIUM | 5.4 | 0.4% | Nov 4, 2026 | MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote... |
| CVE-2026-118623 | HIGH | 7.8 | 0.4% | Nov 4, 2026 | MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerabilit... |
| CVE-2026-114552 | MEDIUM | 6.5 | 0.5% | Nov 4, 2026 | MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability. This vulnerability a... |
| CVE-2026-114551 | MEDIUM | 5.9 | 0.3% | Nov 4, 2026 | MailEnable Auth Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to di... |