CVE Vulnerability Database
Search and browse 420,132 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-119675 | HIGH | 8.6 | — | Nov 3, 2026 | MongoDB Database Tools mongorestore inconsistently handles the system.buckets. prefix when validating collection names i... |
| CVE-2026-119674 | LOW | 3.7 | — | Nov 3, 2026 | MongoDB Database Tools mongorestore incorrectly URL-decodes an original collection name read from metadata when the corr... |
| CVE-2026-119673 | LOW | 2.8 | — | Nov 3, 2026 | MongoDB Database Tools mongofiles does not resolve existing parent-directory symlinks when validating output paths for g... |
| CVE-2026-119672 | MEDIUM | 4.8 | — | Nov 3, 2026 | MongoDB Database Tools mongofiles uses a database-stored GridFS filename as the output destination for get_id when --loc... |
| CVE-2026-119521 | MEDIUM | 6.5 | 0.1% | Nov 3, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Paid Me... |
| CVE-2026-119509 | MEDIUM | 5.3 | — | Nov 3, 2026 | Missing Authorization vulnerability in eranfl ClickCease Click Fraud Protection clickcease-click-fraud-protection allows... |
| CVE-2026-119495 | MEDIUM | 5.3 | — | Nov 3, 2026 | Missing Authorization vulnerability in WebberZone Better Search better-search allows Exploiting Incorrectly Configured A... |
| CVE-2026-119487 | MEDIUM | 5.3 | — | Nov 3, 2026 | Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access Control S... |
| CVE-2026-119485 | MEDIUM | 5.3 | — | Nov 3, 2026 | Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access Control S... |
| CVE-2026-116859 | MEDIUM | 5.3 | — | Nov 3, 2026 | Missing Authorization vulnerability in WPMU DEV Forminator forminator allows Exploiting Incorrectly Configured Access Co... |
| CVE-2026-116858 | MEDIUM | 4.3 | 0.2% | Nov 3, 2026 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPMU DEV Forminator formi... |
| CVE-2026-115716 | MEDIUM | 6.5 | — | Nov 3, 2026 | Allocation of Resources Without Limits or Throttling (CWE-770) in APM Server can lead to denial of service via Oversized... |
| CVE-2026-115715 | MEDIUM | 6.5 | — | Nov 3, 2026 | Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to denial of service via a spec... |
| CVE-2026-115714 | HIGH | 7.4 | — | Nov 3, 2026 | Improper Certificate Validation (CWE-295) in the operating system certificate bundle shipped in the Docker images of APM... |
| CVE-2026-115710 | MEDIUM | 4.2 | — | Nov 3, 2026 | Use of Cache Containing Sensitive Information (CWE-524) in Elasticsearch can lead to information disclosure and incorrec... |
| CVE-2026-115298 | MEDIUM | 4.3 | — | Nov 3, 2026 | Incorrect Authorization (CWE-863) in Elasticsearch can lead to information disclosure via Accessing Functionality Not Pr... |
| CVE-2026-115297 | MEDIUM | 6.5 | — | Nov 3, 2026 | NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via specially... |
| CVE-2026-115295 | MEDIUM | 4.3 | — | Nov 3, 2026 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Accessing Fu... |
| CVE-2026-115294 | HIGH | 7.3 | — | Nov 3, 2026 | Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in the Kibana Fleet feature can lead to unauthorize... |
| CVE-2026-115293 | MEDIUM | 6.5 | — | Nov 3, 2026 | Insertion of Sensitive Information Into Sent Data (CWE-201) in Kibana Observability onboarding can lead to disclosure of... |
| CVE-2026-115292 | MEDIUM | 4.3 | — | Nov 3, 2026 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana Machine Learning can lead to information disclosure... |
| CVE-2026-115290 | HIGH | 7.5 | — | Nov 3, 2026 | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads... |
| CVE-2026-115289 | MEDIUM | 4.3 | — | Nov 3, 2026 | Use of Multiple Resources with Duplicate Identifier (CWE-694) in APM Server can lead to information disclosure via a spe... |
| CVE-2026-114187 | MEDIUM | 5.3 | 0.2% | Nov 3, 2026 | Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Confi... |
| CVE-2026-114185 | MEDIUM | 6.5 | — | Nov 3, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes AnyWhere E... |