CVE Vulnerability Database
Search and browse 420,152 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-97350 | MEDIUM | 6.9 | — | Nov 3, 2026 | Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenVPN configurations and proxy se... |
| CVE-2026-73328 | HIGH | 7.2 | — | Nov 3, 2026 | Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vulnerability that allows authenti... |
| CVE-2026-65168 | HIGH | 7 | — | Nov 3, 2026 | NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code. |
| CVE-2026-65165 | MEDIUM | 5.3 | — | Nov 3, 2026 | NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distri... |
| CVE-2026-65140 | MEDIUM | 5.7 | — | Nov 3, 2026 | NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that ... |
| CVE-2026-65139 | MEDIUM | 6.3 | — | Nov 3, 2026 | NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary co... |
| CVE-2026-65138 | MEDIUM | 6.3 | — | Nov 3, 2026 | NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex... |
| CVE-2026-65109 | MEDIUM | 4.7 | — | Nov 3, 2026 | NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remo... |
| CVE-2026-65108 | MEDIUM | 6.3 | — | Nov 3, 2026 | NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd i... |
| CVE-2026-65107 | MEDIUM | 6.3 | — | Nov 3, 2026 | NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file tra... |
| CVE-2026-121578 | MEDIUM | 6.1 | — | Nov 3, 2026 | Tactical RMM contains a stored XSS vulnerability caused by improperly validated input or encode output for various field... |
| CVE-2026-121564 | LOW | 1.8 | — | Nov 3, 2026 | Incomplete Comparison with Missing Factors (CWE-1023) in merge_chats() (whatstk/utils/chat_merge.py), reached from BaseC... |
| CVE-2026-121562 | MEDIUM | 5.3 | — | Nov 3, 2026 | CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint that exposes... |
| CVE-2026-121561 | HIGH | 7.7 | 0.4% | Nov 3, 2026 | Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that all... |
| CVE-2026-121560 | HIGH | 7.1 | — | Nov 3, 2026 | LogChimp 0.9.0-alpha.1 before 0.9.3 contains an authorization bypass vulnerability that allows authenticated post author... |
| CVE-2026-121559 | HIGH | 7.2 | — | Nov 3, 2026 | GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 contains a privilege escalation vulnerability that allows authentic... |
| CVE-2026-121558 | MEDIUM | 4.3 | — | Nov 3, 2026 | AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metadata_allowed in rag/agentic_rag.... |
| CVE-2026-121557 | MEDIUM | 5.9 | 0.4% | Nov 3, 2026 | WPPConnect Server through 2.10.74 contains a missing authentication vulnerability that allows unauthenticated attackers ... |
| CVE-2026-121556 | HIGH | 8.3 | — | Nov 3, 2026 | FastBee through 2.1.0 contains an insecure direct object reference vulnerability in ProductController that allows authen... |
| CVE-2026-121555 | HIGH | 7.5 | — | Nov 3, 2026 | Foxel through 2.4.0 contains a missing authentication vulnerability that allows unauthenticated attackers to read files ... |
| CVE-2026-121554 | MEDIUM | 5.9 | — | Nov 3, 2026 | cordova-plugin-advanced-http 1.5.0 through 3.3.1 contains an information disclosure vulnerability that leaks cookies to ... |
| CVE-2026-121553 | MEDIUM | 4.8 | 0.4% | Nov 3, 2026 | Cotonti through 1.0.0 generates registration and email-change validation tokens with md5(microtime()), allowing attacker... |
| CVE-2026-121552 | MEDIUM | 4.3 | — | Nov 3, 2026 | Dromara domain-admin before 1.6.79 contains a missing authorization vulnerability in the POST /api/getGroupUserList hand... |
| CVE-2026-121551 | MEDIUM | 5.4 | — | Nov 3, 2026 | PostfixAdmin through 4.0.5 contains a stored cross-site scripting vulnerability that allows authenticated mailbox users ... |
| CVE-2026-121550 | LOW | 3.3 | — | Nov 3, 2026 | nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because ... |