CVE Vulnerability Database
Search and browse 420,074 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-114550 | HIGH | 8.1 | 0.8% | Nov 4, 2026 | libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnera... |
| CVE-2026-114549 | CRITICAL | 9.8 | 0.6% | Nov 4, 2026 | NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote a... |
| CVE-2026-121736 | MEDIUM | 5.3 | — | Nov 3, 2026 | NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the POST /api/v2/oauth/authorize hand... |
| CVE-2026-121735 | LOW | 3.7 | — | Nov 3, 2026 | blueprintUE self-hosted edition before 4.3.4 contains an insufficient session expiration vulnerability that allows attac... |
| CVE-2026-121734 | MEDIUM | 6.5 | 0.3% | Nov 3, 2026 | ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any workspace administrator to r... |
| CVE-2026-121733 | MEDIUM | 5.4 | 0.2% | Nov 3, 2026 | Bagisto before 2.4.5 contains a stored cross-site scripting vulnerability that allows authenticated customers to upload ... |
| CVE-2026-121732 | LOW | 2.7 | — | Nov 3, 2026 | RosarioSIS before 12.9 contains an improper authorization vulnerability that allows school-scoped administrators to assi... |
| CVE-2026-121731 | HIGH | 8.8 | — | Nov 3, 2026 | RosarioSIS before 12.9 contains a sql injection vulnerability that allows authenticated non-student users, including par... |
| CVE-2026-121730 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | emailflare before commit cf31f33 contains a missing authorization vulnerability in POST /api/inbox/compose that allows a... |
| CVE-2026-121729 | HIGH | 8.3 | 0.2% | Nov 3, 2026 | emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes th... |
| CVE-2026-121728 | MEDIUM | 5.3 | — | Nov 3, 2026 | SourceHut meta.sr.ht 0.56.11 before 0.89.0 contains an authorization bypass vulnerability that allows unauthenticated at... |
| CVE-2026-121727 | HIGH | 7.5 | — | Nov 3, 2026 | Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauthenticated ... |
| CVE-2026-121582 | MEDIUM | 6.5 | — | Nov 3, 2026 | A vulnerability has been found in Umami up to 3.4.1. Impacted is an unknown function of the file src/app/api/record/rout... |
| CVE-2026-121581 | MEDIUM | 4.3 | — | Nov 3, 2026 | A vulnerability has been found in ArcReel 0.32.0/0.33.0/0.34.0. The impacted element is an unknown function of the file ... |
| CVE-2026-121565 | HIGH | 7.4 | 0.2% | Nov 3, 2026 | Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to di... |
| CVE-2026-121539 | MEDIUM | 6.3 | 0.2% | Nov 3, 2026 | A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function Ch... |
| CVE-2026-121535 | LOW | 3.7 | 0.5% | Nov 3, 2026 | A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87. This vulnerability affects the function checkPas... |
| CVE-2026-121520 | MEDIUM | 4.5 | 0.1% | Nov 3, 2026 | In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control APIs can submit a build re... |
| CVE-2026-120775 | HIGH | 7.2 | 0.3% | Nov 3, 2026 | Tanium addressed a heap-based buffer overflow vulnerability in Deploy. |
| CVE-2026-118237 | MEDIUM | 5.3 | 0.3% | Nov 3, 2026 | An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). When proving... |
| CVE-2026-116669 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Tanium addressed an improper access controls vulnerability in Discover. |
| CVE-2026-116668 | MEDIUM | 4.3 | 0.3% | Nov 3, 2026 | Tanium addressed an uncontrolled resource consumption vulnerability in Discover. |
| CVE-2026-116667 | MEDIUM | 4.2 | 0.1% | Nov 3, 2026 | Tanium addressed an improper access controls vulnerability in Discover. |
| CVE-2026-116666 | MEDIUM | 4.3 | 0.2% | Nov 3, 2026 | Tanium addressed an information disclosure vulnerability in Discover. |
| CVE-2026-116665 | MEDIUM | 4.3 | 0.2% | Nov 3, 2026 | Tanium addressed an information disclosure vulnerability in Discover. |