CVE Vulnerability Database
Search and browse 420,132 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-63500 | HIGH | 7.1 | — | Nov 3, 2026 | Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Pri... |
| CVE-2026-63489 | HIGH | 7.6 | — | Nov 3, 2026 | Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. In ... |
| CVE-2026-63482 | HIGH | 7.5 | — | Nov 3, 2026 | Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Pri... |
| CVE-2026-63478 | MEDIUM | 5.3 | 0.3% | Nov 3, 2026 | isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's tr... |
| CVE-2026-63476 | MEDIUM | 4.3 | 0.3% | Nov 3, 2026 | isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git read... |
| CVE-2026-63475 | MEDIUM | 4.3 | — | Nov 3, 2026 | isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git pers... |
| CVE-2026-63471 | CRITICAL | 9.3 | 0.3% | Nov 3, 2026 | fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts an OpenAPI... |
| CVE-2026-63470 | CRITICAL | 9.3 | — | Nov 3, 2026 | fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts Operation.... |
| CVE-2026-63469 | CRITICAL | 9.3 | — | Nov 3, 2026 | fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts an additio... |
| CVE-2026-63434 | MEDIUM | 4.3 | — | Nov 3, 2026 | MyTube is a self-hosted downloader and player for several video websites. Prior to 1.10.6, when statisticsEnabled and st... |
| CVE-2026-63433 | MEDIUM | 6.8 | 0.1% | Nov 3, 2026 | MyTube is a self-hosted downloader and player for several video websites. Prior to 1.10.6, shouldSkipCsrfProtection() in... |
| CVE-2026-63395 | HIGH | 8.8 | — | Nov 3, 2026 | isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's gi... |
| CVE-2026-54161 | HIGH | 8.1 | — | Nov 3, 2026 | Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU... |
| CVE-2026-45146 | HIGH | 7.2 | — | Nov 3, 2026 | Chamilo LMS is an open-source learning management system. Prior to 1.11.40 and 2.0.1, an authenticated administrator can... |
| CVE-2026-121577 | MEDIUM | 6.7 | 0.1% | Nov 3, 2026 | Inefficient Regular Expression Complexity (CWE-1333) in generate_regex() (whatstk/whatsapp/parser.py) in whatstk from 0.... |
| CVE-2026-120567 | MEDIUM | 5.4 | 0.1% | Nov 3, 2026 | The MongoDB Entity Framework Core provider does not neutralize special elements in values passed to SetProperty when an ... |
| CVE-2026-110826 | MEDIUM | 6.3 | — | Nov 3, 2026 | Improper Session Invalidation after Authentication Credential Change vulnerability in team-alembic ash_authentication al... |
| CVE-2026-105822 | HIGH | 8.3 | 0.2% | Nov 3, 2026 | The Tapo Cloud MQTT proxy contains a server-side request forgery (SSRF) vulnerability because it accepts a user-controll... |
| CVE-2026-105821 | HIGH | 8.3 | 0.2% | Nov 3, 2026 | The Tapo Cloud MQTT broker contains a broken access control vulnerability in a proxy topic used by authenticated Tapo de... |
| CVE-2025-71452 | MEDIUM | 6.1 | — | Nov 3, 2026 | Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in templates/progress/clients... |
| CVE-2025-71451 | MEDIUM | 6.1 | 0.3% | Nov 3, 2026 | Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in templates/progress/servers... |
| CVE-2026-82976 | HIGH | 7.1 | — | Nov 3, 2026 | A flaw was found in the image-customization-controller used in OpenShift's bare metal provisioning stack. The controller... |
| CVE-2026-63417 | HIGH | 8.2 | — | Nov 3, 2026 | Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictiona... |
| CVE-2026-63198 | HIGH | 7.3 | — | Nov 3, 2026 | traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, OAuth2 silent authorization reque... |
| CVE-2026-63197 | HIGH | 7.3 | — | Nov 3, 2026 | traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, instances configured with TRAQ_ST... |