CVE Find is a real-time vulnerability database indexing 418 386 security flaws (CVE) from MITRE, NVD, CISA KEV, CWE and CAPEC. 3147 new CVEs were published in the last 7 days.
Data aggregated from: MITRE Corporation (CVE, CWE, CAPEC), National Vulnerability Database – NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).
| CVE ID | Published | Description | Score | Severity | |
|---|---|---|---|---|---|
CVE-2026-121448 |
2026-11-03 15h17 +00:00 |
Dockhand before 1.0.54 contains a path traversal vulnerability that allows authenticated users to re... Directory Traversal |
8.3 |
High |
|
CVE-2026-121429 |
2026-11-03 15h17 +00:00 |
AzuraCast through 0.23.8 contains a command injection vulnerability that allows station users with P... OS Command Injection |
8.8 |
High |
|
CVE-2026-121428 |
2026-11-03 15h17 +00:00 |
AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated st... Code Injection |
8.8 |
High |
|
CVE-2026-85035 |
2026-11-03 14h17 +00:00 |
The can_add_rx_filter_msgq() system call installs a CAN RX filter whose callback (can_msgq_put() in ... Memory Corruption |
8.8 |
High |
|
CVE-2026-76124 |
2026-11-03 13h17 +00:00 |
The BuddyBoss App plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to,... File Inclusion |
8.8 |
High |
|
CVE-2026-105978 |
2026-11-03 08h58 +00:00 |
Improper input validation in management control functions may allow a remote attacker with high priv... OS Command Injection |
8.6 |
High |
|
CVE-2026-4052 |
2026-11-03 08h02 +00:00 |
This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manag... Authorization problems |
9.8 |
Critical |
|
CVE-2026-13594 |
2026-11-03 07h29 +00:00 |
Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable... |
9.1 |
Critical |
|
CVE-2026-120534 |
2026-11-03 05h18 +00:00 |
The Advanced Custom Fields: Extended PRO plugin for WordPress is vulnerable to Limited Code Injectio... File Inclusion |
9.8 |
Critical |
|
CVE-2026-120518 |
2026-11-03 05h18 +00:00 |
The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in... Directory Traversal |
9.1 |
Critical |