CVE Vulnerability Database
Search and browse 420,152 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-113593 | LOW | 3.1 | — | Nov 3, 2026 | An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19. The `django.middleware.cac... |
| CVE-2026-111362 | MEDIUM | 5.3 | — | Nov 3, 2026 | An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19. `django.contrib.gis.gdal.O... |
| CVE-2026-111211 | MEDIUM | 5.3 | — | Nov 3, 2026 | An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19. `django.contrib.gis.forms.... |
| CVE-2026-108147 | MEDIUM | 5.3 | — | Nov 3, 2026 | An issue was discovered in Django 6.1 before 6.1.3, 6.0.4 before 6.0.10, and 5.2.13 before 5.2.19. `django.http.multipar... |
| CVE-2026-43603 | MEDIUM | 6.9 | — | Nov 3, 2026 | A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of serv... |
| CVE-2026-40661 | MEDIUM | 5.2 | — | Nov 3, 2026 | An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply... |
| CVE-2026-40660 | MEDIUM | 5.2 | — | Nov 3, 2026 | A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local acc... |
| CVE-2026-40659 | MEDIUM | 5.1 | — | Nov 3, 2026 | An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specia... |
| CVE-2026-40652 | MEDIUM | 5.2 | — | Nov 3, 2026 | An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a spec... |
| CVE-2026-121513 | HIGH | 7.5 | — | Nov 3, 2026 | Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacker to Reliably Cause DoS |
| CVE-2026-121512 | HIGH | 7.5 | — | Nov 3, 2026 | Memory Leak with Amplification in µD3TN BPv6 EID Reference Handling allows Unauthenticated Remote Attacker to Cause DoS |
| CVE-2026-121511 | HIGH | 7.1 | — | Nov 3, 2026 | Heap Out-of-Bounds Read in µD3TN BPv6/BPv7 Fragmenter allows Local Attacker to Read Memory and Reliably Cause DoS |
| CVE-2026-121510 | HIGH | 7.5 | — | Nov 3, 2026 | Remote Unauthenticated Heap Out-of-Bounds Write in µD3TN BPv6 Administrative Record Parser allows Unauthenticated Remote... |
| CVE-2026-121508 | MEDIUM | 5.9 | — | Nov 3, 2026 | Use-After-Free in µD3TN BPv6 Fragmenter Cleanup allows Unauthenticated Remote Attacker to Cause DoS on Allocation Failur... |
| CVE-2026-121507 | MEDIUM | 5.9 | — | Nov 3, 2026 | Double Free in µD3TN BPv6 Fragmenter Block Duplication allows Unauthenticated Remote Attacker to Cause DoS on Allocation... |
| CVE-2026-121506 | HIGH | 7.4 | — | Nov 3, 2026 | An out-of-bounds read and write in NTS client extension field parsing (extens_client_recv) in NTPsec before 1.2.5 allows... |
| CVE-2026-121505 | LOW | 3.7 | — | Nov 3, 2026 | An out-of-bounds read in the NTS-KE client response parser (nts_client_process_response_core) in NTPsec before 1.2.4 all... |
| CVE-2026-121449 | MEDIUM | 6.5 | — | Nov 3, 2026 | Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets because deployStack() attaches resolved secret values... |
| CVE-2026-121448 | HIGH | 8.3 | — | Nov 3, 2026 | Dockhand before 1.0.54 contains a path traversal vulnerability that allows authenticated users to read, overwrite, and d... |
| CVE-2026-121447 | MEDIUM | 6.1 | — | Nov 3, 2026 | svg-sanitizer before 1.1.0 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization by... |
| CVE-2026-121446 | MEDIUM | 4.3 | 0.2% | Nov 3, 2026 | svg-sanitizer from 0.5.0 before 1.1.0 contains an incomplete filtering vulnerability that allows attackers to bypass rem... |
| CVE-2026-121445 | MEDIUM | 5.9 | — | Nov 3, 2026 | darylldoyle svg-sanitizer from 1.0.0 before 1.1.0 contains a regular expression denial of service vulnerability in the i... |
| CVE-2026-121444 | HIGH | 7.5 | — | Nov 3, 2026 | svg-sanitizer from 0.11.0 before 1.1.0 contains an algorithmic complexity denial of service vulnerability in hasInfinite... |
| CVE-2026-121443 | MEDIUM | 5.3 | — | Nov 3, 2026 | svg-sanitizer from 1.1.0 before 1.1.1 contains a denial of service vulnerability that allows remote attackers to crash r... |
| CVE-2026-121442 | MEDIUM | 4.3 | 0.2% | Nov 3, 2026 | Frappe HRMS before 15.61.0 contains a permission bypass vulnerability that allows authenticated employees to view other ... |