CVE Vulnerability Database
Search and browse 419,323 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-54914 | HIGH | 8.3 | — | Nov 5, 2026 | WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to 2.4.5, wasi_poll_oneof... |
| CVE-2026-54913 | MEDIUM | 6.9 | — | Nov 5, 2026 | WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to 2.4.5, load_init_expr ... |
| CVE-2026-54912 | HIGH | 8.8 | — | Nov 5, 2026 | WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to 2.4.5, the two-pass fa... |
| CVE-2026-123184 | HIGH | 8.1 | — | Nov 5, 2026 | An incorrect authorization vulnerability exists in the Altium 365 Git Service. The permission check performed when a use... |
| CVE-2026-121949 | MEDIUM | 5.4 | — | Nov 5, 2026 | The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attributes, allowi... |
| CVE-2026-120859 | HIGH | 7.8 | — | Nov 5, 2026 | PyMoDAQ before 4.4.13, and pymodaq_data, pymodaq_gui, and pymodaq_utils before 5.1.15, 5.2.x before 5.2.14, and 5.3.x be... |
| CVE-2026-115452 | MEDIUM | 6.7 | — | Nov 5, 2026 | Joomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and Smile Pack ... |
| CVE-2026-112110 | MEDIUM | 6.3 | — | Nov 5, 2026 | A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function can... |
| CVE-2026-112109 | HIGH | 7 | — | Nov 5, 2026 | A local privilege escalation vulnerability in Thales SafeNet Authentication Client (SAC) SACSrv can allow an authenticat... |
| CVE-2026-107903 | HIGH | 8.3 | — | Nov 5, 2026 | Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0 |
| CVE-2026-107359 | MEDIUM | 6.5 | — | Nov 5, 2026 | Improper input validation in the beacon handler for WF200 firmware versions 3.17.0 and earlier may result in a divide-by... |
| CVE-2026-107130 | MEDIUM | 6.9 | — | Nov 5, 2026 | Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0 |
| CVE-2026-107129 | MEDIUM | 5.5 | — | Nov 5, 2026 | Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0 |
| CVE-2026-105607 | HIGH | 8.3 | — | Nov 5, 2026 | Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox ... |
| CVE-2026-102927 | MEDIUM | 5.9 | — | Nov 5, 2026 | HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1.11.1, the WebSocket permissio... |
| CVE-2026-97371 | MEDIUM | 5.3 | — | Nov 5, 2026 | ntopng is a web-based network traffic monitoring application. Prior to 6.7.260721, ndpi_get_custom_category_match writes... |
| CVE-2026-85287 | MEDIUM | 6.5 | — | Nov 5, 2026 | HomeBox is a home inventory and organization system. Prior to 0.27.0, POST /api/v1/users/register and the users.email un... |
| CVE-2026-82965 | HIGH | 7.5 | — | Nov 5, 2026 | A flaw was found in the SAML implementation of Keycloak, an open-source identity and access management solution. The SAM... |
| CVE-2026-82413 | HIGH | 8.8 | — | Nov 5, 2026 | ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, scripts/lua/rest/v2/add/host/to_scan.... |
| CVE-2026-76077 | HIGH | 8.1 | — | Nov 5, 2026 | ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the XER tokenizer NT() in asn1crt/asn1c... |
| CVE-2026-75615 | MEDIUM | 5.3 | — | Nov 5, 2026 | ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the ACN runtime function Acn_Dec_String... |
| CVE-2026-75614 | HIGH | 8.1 | — | Nov 5, 2026 | ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStream_DecodeConstraintWholeNumber i... |
| CVE-2026-75599 | MEDIUM | 5.4 | — | Nov 5, 2026 | HomeBox is a home inventory and organization system. Prior to 0.27.0, the maybeUrl() utility accepts markdown-style link... |
| CVE-2026-54146 | HIGH | 8.8 | — | Nov 5, 2026 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. From 0.53.15 before 0.57.... |
| CVE-2026-54145 | HIGH | 8.8 | — | Nov 5, 2026 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. In affected versions befo... |