CVE Vulnerability Database
Search and browse 420,132 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-121626 | LOW | 3.7 | 0.3% | Nov 3, 2026 | GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vulnerability in H46024Socket::ReceivedProbePacket() t... |
| CVE-2026-121625 | LOW | 3.7 | — | Nov 3, 2026 | GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vulnerability in ParseRTCP() in ProxyChannel.cxx that ... |
| CVE-2026-121624 | MEDIUM | 6.8 | — | Nov 3, 2026 | Nanosystems Supremo for Windows and macOS before 5.0.2.3874 contains an improper certificate validation vulnerability th... |
| CVE-2026-121263 | MEDIUM | 6.3 | — | Nov 3, 2026 | A vulnerability was determined in phpMyAdmin MoTranslator up to 6.0.1. The impacted element is the function Loader::getT... |
| CVE-2026-116845 | MEDIUM | 5.4 | — | Nov 3, 2026 | NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows aut... |
| CVE-2026-97072 | MEDIUM | 4.3 | — | Nov 3, 2026 | Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Secu... |
| CVE-2026-39777 | MEDIUM | 4.3 | 0.2% | Nov 3, 2026 | Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly... |
| CVE-2026-39743 | MEDIUM | 5.3 | 0.2% | Nov 3, 2026 | Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly... |
| CVE-2026-38601 | — | — | — | Nov 3, 2026 | A hardcoded session secret key in codeskyblue gohttpserver through v1.3.0 allows attackers to impersonate any user, bypa... |
| CVE-2026-38600 | CRITICAL | 9.8 | — | Nov 3, 2026 | A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers to write ar... |
| CVE-2026-38595 | CRITICAL | 9.8 | 0.2% | Nov 3, 2026 | An issue in im3x Scriptables through v2-dev branch allows attackers to inject arbitrary OS commands via uploading a file... |
| CVE-2026-28336 | CRITICAL | 9.9 | — | Nov 3, 2026 | SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of t... |
| CVE-2026-28335 | HIGH | 8.4 | — | Nov 3, 2026 | SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution... |
| CVE-2026-28327 | HIGH | 8.2 | — | Nov 3, 2026 | SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack occurs during installations on... |
| CVE-2026-121631 | MEDIUM | 4.2 | — | Nov 3, 2026 | Lightdash 0.2609.0 before 3.137.0 contains an authorization bypass vulnerability in the RenameService that allows authen... |
| CVE-2026-121604 | LOW | 3.3 | 0.1% | Nov 3, 2026 | wlroots before 0.20.2 contains an out-of-bounds read vulnerability in read_surface_class() in xwayland/xwm.c that allows... |
| CVE-2026-121603 | MEDIUM | 6.5 | — | Nov 3, 2026 | Solanum before commit 2ea1382 contains a buffer overflow vulnerability in ms_kill() that allows malicious linked servers... |
| CVE-2026-121602 | MEDIUM | 6.5 | — | Nov 3, 2026 | Solanum before commit 2ce64de contains a heap-based buffer overflow vulnerability that allows a malicious linked server ... |
| CVE-2026-121588 | MEDIUM | 6.1 | — | Nov 3, 2026 | TeXlyre from 0.11.0 before 0.13.5 contains a stored cross-site scripting vulnerability that allows attackers to execute ... |
| CVE-2026-121587 | MEDIUM | 5.3 | 0.3% | Nov 3, 2026 | Coolify before 4.1.1 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate... |
| CVE-2026-121262 | MEDIUM | 5.3 | — | Nov 3, 2026 | A vulnerability was found in phpMyAdmin SQL-Parser 6.0.0/6.0.1. The affected element is the function parse of the file s... |
| CVE-2026-121261 | MEDIUM | 4.3 | 0.3% | Nov 3, 2026 | A vulnerability has been found in phpMyAdmin ShapeFile up to 4.0.1. Impacted is the function ShapeRecord::loadFromFile o... |
| CVE-2026-121259 | MEDIUM | 6.5 | 0.3% | Nov 3, 2026 | A flaw was found in the GStreamer JPEG 2000 decimator in gst-plugins-bad. Crafted JPEG 2000 media can cause integer over... |
| CVE-2026-120846 | MEDIUM | 5.3 | 0.2% | Nov 3, 2026 | Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Con... |
| CVE-2026-120843 | MEDIUM | 6.5 | 0.1% | Nov 3, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Barn2 Plugins Post... |