CVE Vulnerability Database
Search and browse 420,132 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-57154 | HIGH | 8.1 | 0.5% | Nov 3, 2026 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11 and 26.4.1p1, authenticated Web UI or API us... |
| CVE-2026-46487 | HIGH | 7.5 | 0.5% | Nov 3, 2026 | GeoNetwork is a catalog application to manage spatially referenced resources. From 4.0.0-alpha.1 until 4.2.16 and 4.4.11... |
| CVE-2026-39379 | HIGH | 7.1 | — | Nov 3, 2026 | GeoNetwork is a catalog application to manage spatially referenced resources. From 3.0.0 until 4.2.15 and 4.4.10, reques... |
| CVE-2026-121652 | MEDIUM | 5.4 | — | Nov 3, 2026 | Cross-site scripting (XSS) issue in AWS Amplify maplibre-gl-js-amplify before 4.0.3 might allow remote authenticated use... |
| CVE-2026-121501 | MEDIUM | 6.3 | 0.2% | Nov 3, 2026 | A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project. The affected element is the function session_... |
| CVE-2026-121382 | HIGH | 7.5 | — | Nov 3, 2026 | A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. Affected by this issue is the function msg_aes_dec... |
| CVE-2026-120956 | HIGH | 7.1 | — | Nov 3, 2026 | The MongoDB C Driver does not validate the type or format of a namespace field returned by the server in a query respons... |
| CVE-2026-120955 | HIGH | 7.5 | — | Nov 3, 2026 | The GridFS file download API in the MongoDB C Driver does not check the result of an internal operation under certain er... |
| CVE-2026-120954 | LOW | 3.7 | — | Nov 3, 2026 | A weakness in the BSON library's handling of a specialized binary vector data type allows an arithmetic wraparound when ... |
| CVE-2026-120953 | MEDIUM | 4.3 | — | Nov 3, 2026 | A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver. During an interactive si... |
| CVE-2026-120684 | MEDIUM | 6.5 | — | Nov 3, 2026 | A memory-initialization flaw in the legacy GridFS file handling of the MongoDB C Driver can cause uninitialized process ... |
| CVE-2026-120678 | HIGH | 7.5 | — | Nov 3, 2026 | A memory management flaw in the MongoDB C Driver's handling of compressed responses may cause the client library to hold... |
| CVE-2026-120673 | MEDIUM | 5.5 | — | Nov 3, 2026 | A component of the MongoDB Rust Driver that records diagnostic tracing data can capture command content before automatic... |
| CVE-2026-119922 | HIGH | 8.8 | 0.5% | Nov 3, 2026 | Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4... |
| CVE-2026-112917 | CRITICAL | 9.2 | 0.2% | Nov 3, 2026 | In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use 32-bit socketcall to bypass... |
| CVE-2026-63499 | MEDIUM | 6.9 | — | Nov 3, 2026 | zt-zip is a Java library that provides convenience methods for ZIP archive manipulation. Prior to 1.18.1, ZipUtil.unpack... |
| CVE-2026-63494 | — | — | — | Nov 3, 2026 | Rejected reason: This CVE is a duplicate of another CVE. |
| CVE-2026-63492 | — | — | — | Nov 3, 2026 | Rejected reason: This CVE is a duplicate of another CVE. |
| CVE-2026-63436 | MEDIUM | 6.1 | — | Nov 3, 2026 | zt-zip is a Java library that provides convenience methods for ZIP archive manipulation. Prior to 1.18.0, the Zips.get(z... |
| CVE-2026-63418 | HIGH | 7 | — | Nov 3, 2026 | Monitoring Plugins is a suite of plugins for monitoring applications. From 3.0.0-rc1 until 3.0.1, check_icmp stores the ... |
| CVE-2026-44267 | CRITICAL | 9.8 | 0.8% | Nov 3, 2026 | Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, plain Elo strings supplied to defaultF... |
| CVE-2026-44266 | CRITICAL | 9.8 | — | Nov 3, 2026 | Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, the Ruby backend in src/compilers/ruby... |
| CVE-2026-44265 | HIGH | 7.4 | — | Nov 3, 2026 | Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, Elo's programmatic AST API accepts arb... |
| CVE-2026-121628 | LOW | 3.7 | — | Nov 3, 2026 | Bagisto before 2.3.16 and 2.4.x before 2.4.1 contains a race condition vulnerability in manageCartRule() that allows att... |
| CVE-2026-121627 | MEDIUM | 6.1 | — | Nov 3, 2026 | buku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerability in the bukuserver bookmark list that allows ... |