CVE Vulnerability Database
Search and browse 420,074 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-121541 | MEDIUM | 5.6 | 0.1% | Nov 3, 2026 | In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together ma... |
| CVE-2026-121531 | MEDIUM | 6.3 | — | Nov 3, 2026 | A vulnerability has been found in Umami 3.3.x/3.4.0/3.4.1. This affects an unknown part of the file src/app/api/auth/log... |
| CVE-2026-121524 | HIGH | 7.3 | — | Nov 3, 2026 | A flaw has been found in sumiie24 School-Management-System up to d946d649c7c95e101fc5679ecd91999533bb10d7. Affected by t... |
| CVE-2026-121522 | MEDIUM | 6.7 | 0.1% | Nov 3, 2026 | In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source... |
| CVE-2026-120931 | CRITICAL | 9.6 | 0.4% | Nov 3, 2026 | Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute ... |
| CVE-2026-120930 | MEDIUM | 5.4 | 0.2% | Nov 3, 2026 | Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin ... |
| CVE-2026-119084 | HIGH | 8.1 | 0.4% | Nov 3, 2026 | Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before 2.3... |
| CVE-2026-118865 | HIGH | 7.3 | 0.9% | Nov 3, 2026 | An authenticated OS command injection vulnerability exists in the Offline Download component (USB storage allocation) of... |
| CVE-2026-115541 | HIGH | 7.2 | 0.4% | Nov 3, 2026 | HumHub Community Edition 1.19.0 contains a stored cross-site scripting vulnerability in the friendship confirmation dial... |
| CVE-2026-112354 | CRITICAL | 9.8 | 0.5% | Nov 3, 2026 | Etrel INCH AC charging station management web interface prior to firmware versions 7.1.2 and 8.0.1 contains a hard-coded... |
| CVE-2026-95860 | CRITICAL | 9.1 | 0.6% | Nov 3, 2026 | node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.42.0 until 2.180.0, namespace-level access con... |
| CVE-2026-82161 | MEDIUM | 6.8 | 0.2% | Nov 3, 2026 | Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page ... |
| CVE-2026-82160 | LOW | 3.3 | 0.2% | Nov 3, 2026 | Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page ... |
| CVE-2026-82159 | HIGH | 8.8 | 0.4% | Nov 3, 2026 | Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page ... |
| CVE-2026-82158 | CRITICAL | 9 | 0.3% | Nov 3, 2026 | Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page ... |
| CVE-2026-82155 | HIGH | 7.8 | 0.4% | Nov 3, 2026 | Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. An unauthenticated... |
| CVE-2026-82154 | LOW | 2.4 | 0.2% | Nov 3, 2026 | Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability. An unauthen... |
| CVE-2026-76894 | LOW | 3.1 | — | Nov 3, 2026 | CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the DataStore table UI in src/resources... |
| CVE-2026-64672 | MEDIUM | 4.4 | 0.2% | Nov 3, 2026 | Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale... |
| CVE-2026-61497 | MEDIUM | 5.2 | — | Nov 3, 2026 | TinyUSB before 0.20.1 contains an integer underflow vulnerability in the HID host report descriptor parser tuh_hid_parse... |
| CVE-2026-61496 | — | — | — | Nov 3, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-61495 | MEDIUM | 6.8 | — | Nov 3, 2026 | TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class h... |
| CVE-2026-55186 | MEDIUM | 4.2 | — | Nov 3, 2026 | Silverstripe MFA provides multi-factor authentication for Silverstripe CMS. Prior to 6.0.0, the CMS 5 password reset flo... |
| CVE-2026-28531 | — | — | — | Nov 3, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-121621 | HIGH | 8.8 | 1.8% | Nov 3, 2026 | A command injection vulnerability was found in Argo CD Image Updater, where a proxy URL configured on an SSH Git reposit... |