CVE Vulnerability Database
Search and browse 420,132 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-114183 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows ... |
| CVE-2026-109594 | MEDIUM | 6.8 | — | Nov 3, 2026 | Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability h... |
| CVE-2026-109593 | CRITICAL | 9.1 | — | Nov 3, 2026 | An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read inte... |
| CVE-2026-103916 | HIGH | 8.4 | — | Nov 3, 2026 | Docker Sandboxes sbx cp does not safely confine host-side paths to a shared workspace. A malicious sandbox can create or... |
| CVE-2026-103077 | MEDIUM | 4.3 | — | Nov 3, 2026 | Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Secu... |
| CVE-2026-97350 | MEDIUM | 6.9 | — | Nov 3, 2026 | Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenVPN configurations and proxy se... |
| CVE-2026-73328 | HIGH | 7.2 | — | Nov 3, 2026 | Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vulnerability that allows authenti... |
| CVE-2026-65168 | HIGH | 7 | — | Nov 3, 2026 | NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code. |
| CVE-2026-65165 | MEDIUM | 5.3 | — | Nov 3, 2026 | NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distri... |
| CVE-2026-65140 | MEDIUM | 5.7 | — | Nov 3, 2026 | NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that ... |
| CVE-2026-65139 | MEDIUM | 6.3 | — | Nov 3, 2026 | NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary co... |
| CVE-2026-65138 | MEDIUM | 6.3 | — | Nov 3, 2026 | NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex... |
| CVE-2026-65109 | MEDIUM | 4.7 | — | Nov 3, 2026 | NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remo... |
| CVE-2026-65108 | MEDIUM | 6.3 | — | Nov 3, 2026 | NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd i... |
| CVE-2026-65107 | MEDIUM | 6.3 | — | Nov 3, 2026 | NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file tra... |
| CVE-2026-121578 | MEDIUM | 6.1 | — | Nov 3, 2026 | Tactical RMM contains a stored XSS vulnerability caused by improperly validated input or encode output for various field... |
| CVE-2026-121564 | LOW | 1.8 | — | Nov 3, 2026 | Incomplete Comparison with Missing Factors (CWE-1023) in merge_chats() (whatstk/utils/chat_merge.py), reached from BaseC... |
| CVE-2026-121562 | MEDIUM | 5.3 | — | Nov 3, 2026 | CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint that exposes... |
| CVE-2026-121561 | HIGH | 7.7 | 0.4% | Nov 3, 2026 | Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that all... |
| CVE-2026-121560 | HIGH | 7.1 | — | Nov 3, 2026 | LogChimp 0.9.0-alpha.1 before 0.9.3 contains an authorization bypass vulnerability that allows authenticated post author... |
| CVE-2026-121559 | HIGH | 7.2 | — | Nov 3, 2026 | GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 contains a privilege escalation vulnerability that allows authentic... |
| CVE-2026-121558 | MEDIUM | 4.3 | — | Nov 3, 2026 | AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metadata_allowed in rag/agentic_rag.... |
| CVE-2026-121557 | MEDIUM | 5.9 | 0.4% | Nov 3, 2026 | WPPConnect Server through 2.10.74 contains a missing authentication vulnerability that allows unauthenticated attackers ... |
| CVE-2026-121556 | HIGH | 8.3 | — | Nov 3, 2026 | FastBee through 2.1.0 contains an insecure direct object reference vulnerability in ProductController that allows authen... |
| CVE-2026-121555 | HIGH | 7.5 | — | Nov 3, 2026 | Foxel through 2.4.0 contains a missing authentication vulnerability that allows unauthenticated attackers to read files ... |