CVE Vulnerability Database
Search and browse 420,152 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-121549 | MEDIUM | 4.4 | 0.1% | Nov 3, 2026 | nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local atta... |
| CVE-2026-121548 | HIGH | 7.8 | — | Nov 3, 2026 | Jarun nnn through 5.3 contains an OS command injection vulnerability in plugins/togglex that allows attackers to execute... |
| CVE-2026-121547 | LOW | 2.2 | — | Nov 3, 2026 | Canop dysk before 3.8.2 contains a terminal escape sequence injection vulnerability that allows local users to inject co... |
| CVE-2026-121546 | MEDIUM | 5.9 | — | Nov 3, 2026 | ruTorrent before 5.3.20 contains a path traversal vulnerability in the datadir plugin that allows authenticated users to... |
| CVE-2026-121545 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Dreeve before 5.8.0 contains a missing authentication vulnerability in StravaWebhookRequestHandler::handleEvent that all... |
| CVE-2026-121544 | MEDIUM | 4.9 | — | Nov 3, 2026 | Koodo Reader through 2.4.6 contains a path traversal vulnerability in the self-hosted HTTP server's OPDS handlers that a... |
| CVE-2026-121543 | HIGH | 8.8 | — | Nov 3, 2026 | smart-sso through 2.0.1 contains an incorrect authorization vulnerability in PermissionFilter that allows any authentica... |
| CVE-2026-121455 | MEDIUM | 5.4 | — | Nov 3, 2026 | DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated users... |
| CVE-2026-121454 | LOW | 3.7 | 0.3% | Nov 3, 2026 | Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer._handleScimGet() that allows unauthen... |
| CVE-2026-121453 | LOW | 2.7 | — | Nov 3, 2026 | SQLBot through 1.10.3 contains a path traversal vulnerability in the importToDb endpoint that allows authenticated works... |
| CVE-2026-121452 | MEDIUM | 6.5 | — | Nov 3, 2026 | bbs-go through 4.4.6 contains an improper certificate validation vulnerability that allows network-positioned attackers ... |
| CVE-2026-121451 | HIGH | 8.8 | — | Nov 3, 2026 | AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in its unauthenticated browser-int... |
| CVE-2026-121450 | HIGH | 7.5 | 0.3% | Nov 3, 2026 | CFNext before 3.1.0 contains a weak cryptographic derivation vulnerability that allows subscription link holders to reco... |
| CVE-2026-121260 | CRITICAL | 9.1 | — | Nov 3, 2026 | A flaw has been found in Ziroom ZHOME A0101 1.0.1.0 Build 202004151405. This issue affects the function loadstring of th... |
| CVE-2026-120758 | MEDIUM | 5.5 | — | Nov 3, 2026 | HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HL_unprotect() in src/H5HL.c. H5HL_protect() p... |
| CVE-2026-120757 | HIGH | 7.1 | — | Nov 3, 2026 | HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5L__extern_traverse() in src/H5Lexternal.c, the de... |
| CVE-2026-120756 | MEDIUM | 6.1 | — | Nov 3, 2026 | HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5O__chunk_deserialize() in src/H5Ocache.c. When de... |
| CVE-2026-120755 | MEDIUM | 5.5 | — | Nov 3, 2026 | HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Z__filter_szip() in src/H5Zszip.c. When decoding a ... |
| CVE-2026-120754 | LOW | 3.3 | — | Nov 3, 2026 | HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Z__filter_scaleoffset() in src/H5Zscaleoffse... |
| CVE-2026-119741 | HIGH | 7.5 | 0.6% | Nov 3, 2026 | rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender's hash_search() in match.c th... |
| CVE-2026-119215 | HIGH | 7.6 | — | Nov 3, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in team-alembic ash_authentication allows a user with an ... |
| CVE-2026-118505 | MEDIUM | 6.3 | — | Nov 3, 2026 | Improper Restriction of Excessive Authentication Attempts vulnerability in team-alembic ash_authentication allows an una... |
| CVE-2026-118487 | HIGH | 7.5 | — | Nov 3, 2026 | In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], the `FrameParser` in vertx-stomp creates a `RecordParser` ... |
| CVE-2026-114582 | MEDIUM | 5.3 | — | Nov 3, 2026 | An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19. `django.contrib.gis.gdal.S... |
| CVE-2026-113733 | LOW | 2.2 | — | Nov 3, 2026 | An issue was discovered in Django 6.1 before 6.1.3 and 6.0 before 6.0.10. The `django.contrib.admin.utils.display_for_fi... |