Vulnerability database

2,829 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-82894Summary: Improper Authorization in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on…—unscored05 Nov 2026

CVE-2026-81828Summary: Server-Side Request Forgery in SurveyWrapper in Apache OFBiz 24.09 before 24.09.…—unscored05 Nov 2026

CVE-2026-81816Summary: XML External Entity (XXE) Injection in ContentWorker in Apache OFBiz 24.09 befor…—unscored05 Nov 2026

CVE-2026-81815Summary: SQL Injection in the entity engine's generic performFind service in Apache OFBiz…—unscored05 Nov 2026

CVE-2026-81808Summary: Missing Authorization in ProductSearchEvents in Apache OFBiz 24.09 before 24.09.…—unscored05 Nov 2026

CVE-2026-81744Summary: Incorrect Authorization in ContentPermissionServices in Apache OFBiz 24.09 befor…—unscored05 Nov 2026

CVE-2026-81734Summary: Missing Authorization in ProductEvents in Apache OFBiz 24.09 before 24.09.08 on…—unscored05 Nov 2026

CVE-2026-76152Summary: Path traversal and missing authorization check in the imageCrop and imageRotate…—unscored05 Nov 2026

CVE-2026-76150Summary: Path traversal and missing authorization check in the replaceImageToExistImage s…—unscored05 Nov 2026

CVE-2026-74841Summary: In multitenant deployments, ContextFilter and LoginWorker built a per-tenant del…—unscored05 Nov 2026

CVE-2026-73580Summary: Missing authorization check in the getHRChild service in Apache OFBiz through 24…—unscored05 Nov 2026

CVE-2026-73578Summary: Missing authorization enforcement in RequestHandler.renderView in Apache OFBiz 2…—unscored05 Nov 2026

CVE-2026-73577Summary: Incorrect authorization in RequestHandler in Apache OFBiz 24.09 before 24.09.08…—unscored05 Nov 2026

CVE-2026-71901Summary: Improper Control of Resource Identifiers ('Resource Injection') vulnerability in…—unscored05 Nov 2026

CVE-2026-68524Summary: An unauthenticated attacker can exploit temporary-file handling, access an open…—unscored05 Nov 2026

CVE-2026-66903Summary: Authenticated Path Traversal in Catalog Image Management allows writing image fi…—unscored05 Nov 2026

CVE-2026-123032Summary: A security flaw has been discovered in OpenBMB Internet of Agents up to 9d78e88e…5.5medium05 Nov 2026

CVE-2026-119744Summary: Cendio ThinLinc contains an improper authentication vulnerability in its browser…7.7high05 Nov 2026

CVE-2026-115738Summary: SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlie…7.1high05 Nov 2026

CVE-2026-106716Summary: ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl su…—unscored05 Nov 2026

CVE-2026-106715Summary: NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in…—unscored05 Nov 2026

CVE-2026-106714Summary: Chewy for Android version 26.23.0 does not adequately validate the host of a pro…—unscored05 Nov 2026

CVE-2026-106713Summary: An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obt…—unscored05 Nov 2026

CVE-2026-97356Summary: External Control of File Name or Path vulnerability in the ViewFile component of…—unscored05 Nov 2026

CVE-2026-97355Summary: Use of Hard-coded Password vulnerability in the AdminServer component in Apache…—unscored05 Nov 2026