Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
424,636CVE records
5,163Published, last 7 days
1,779In CISA KEV
1,557Critical, last 30 days
5,599Analysed
13:17 UTCLast NVD sync
Filters Show:
179,438 results. Medium severity.
Page 1 of 8,972| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-126993 | Medium | 5.5 | Not yet mapped | CWE-310 | - | - | - | Nov 12, 2026 |
| CVE-2026-123139 | Medium | 5.8 | Not yet mapped | CWE-940 | - | - | - | Nov 12, 2026 |
| CVE-2026-2982 | Medium | 5.4 | Not yet mapped | Cross-site scripting | - | - | - | Nov 12, 2026 |
| CVE-2026-126643 | Medium | 6.5 | Not yet mapped | Cleartext storage of sensitive dat | - | - | - | Nov 12, 2026 |
| CVE-2026-126641 | Medium | 6.5 | Not yet mapped | CWE-322 | - | - | - | Nov 12, 2026 |
| CVE-2026-118975 | Medium | 6.5 | Not yet mapped | XML external entity (XXE) | - | - | - | Nov 12, 2026 |
| CVE-2026-126642 | Medium | 6.5 | Not yet mapped | Missing authorization | - | - | - | Nov 12, 2026 |
| CVE-2026-40820 | Medium | 6.9 | Not yet mapped | SQL injection | - | - | - | Nov 12, 2026 |
| CVE-2026-126991 | Medium | 5.3 | Not yet mapped | Code injection | - | - | - | Nov 12, 2026 |
| CVE-2026-124817 | Medium | 5.3 | Not yet mapped | Improper access control | - | - | - | Nov 12, 2026 |
| CVE-2026-124665 | Medium | 5.3 | Not yet mapped | Insecure direct object reference | - | - | - | Nov 12, 2026 |
| CVE-2026-124653 | Medium | 6.5 | Not yet mapped | Information exposure | - | - | - | Nov 12, 2026 |
| CVE-2026-124652 | Medium | 4.3 | Not yet mapped | Insecure direct object reference | - | - | - | Nov 12, 2026 |
| CVE-2026-124648 | Medium | 5.3 | Not yet mapped | Incorrect authorization | - | - | - | Nov 12, 2026 |
| CVE-2026-121498 | Medium | 4.8 | Not yet mapped | Insecure direct object reference | - | - | - | Nov 12, 2026 |
| CVE-2026-119039 | Medium | 5.3 | Not yet mapped | Authentication bypass by spoofing | - | - | - | Nov 12, 2026 |
| CVE-2026-118421 | Medium | 6.8 | Not yet mapped | SQL injection | - | - | - | Nov 12, 2026 |
| CVE-2026-110072 | Medium | 6.8 | Not yet mapped | Cross-site scripting | - | - | - | Nov 12, 2026 |
| CVE-2026-106027 | Medium | 5.3 | Not yet mapped | Missing authorization | - | - | - | Nov 12, 2026 |
| CVE-2026-92379 | Medium | 5.4 | Not yet mapped | Cross-site scripting | - | - | - | Nov 12, 2026 |
