Vulnerability database

8,980 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-114408Summary: In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built w…8.7high02 Nov 2026

CVE-2026-104080Summary: Control Web Panel (CWP) before webpanel_version 1.29 contains an OS command inje…EPSS 1.2%8.5high02 Nov 2026

CVE-2026-120492Summary: Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows…6.3medium02 Nov 2026

CVE-2026-120487Summary: LaraDashboard before 1.4.5 contains an incorrect authorization vulnerability in…8.6high02 Nov 2026

CVE-2026-120458Summary: Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_header() i…6.8medium02 Nov 2026

CVE-2026-120454Summary: The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability…6.8medium02 Nov 2026

CVE-2026-120451Summary: libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vu…7.0high02 Nov 2026

CVE-2026-120450Summary: LaraDashboard 1.4.0 before 1.4.9 contains an improper authorization vulnerabilit…5.3medium02 Nov 2026

CVE-2026-120447Summary: HotGo 2.8.4 through 2.15.1 contains an authentication bypass vulnerability that…9.2critical02 Nov 2026

CVE-2026-120446Summary: madong-admin-saas through 5.1.4 contains a missing authentication vulnerability…PoC ×1EPSS 1.0%8.8high02 Nov 2026

CVE-2026-120443Summary: GoFound through 1.4.1 contains a stored cross-site scripting vulnerability that…5.1medium02 Nov 2026

CVE-2026-120442Summary: ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that…PoC ×1EPSS 1.7%9.3critical02 Nov 2026

CVE-2026-120439Summary: QuickJS-NG before 0.16.0 contains an integer overflow in js_typed_array_sort() i…8.3high02 Nov 2026

CVE-2026-120438Summary: QuickJS-NG before 0.16.0 contains an integer overflow in js_proxy_get_own_proper…8.5high02 Nov 2026

CVE-2026-120435Summary: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains…8.5high02 Nov 2026

CVE-2026-120434Summary: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains…8.5high02 Nov 2026

CVE-2026-120431Summary: Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains…8.5high02 Nov 2026

CVE-2026-120430Summary: Camaleon CMS before 2.9.2 contains an insecure direct object reference vulnerabi…5.3medium02 Nov 2026

CVE-2026-120427Summary: MrDoc through 1.1.1 contains a missing authorization vulnerability in the get_do…5.3medium02 Nov 2026

CVE-2026-120426Summary: OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability…8.7high02 Nov 2026

CVE-2025-71450Summary: inih before r63 contains a one-byte stack buffer under-read in ini_parse_stream(…4.8medium02 Nov 2026

CVE-2025-62819Summary: Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when se…6.5medium02 Nov 2026

CVE-2026-120463Summary: Warracker before 1.0.4 contains a missing authorization vulnerability in its Pap…6.0medium02 Nov 2026

CVE-2026-114364Summary: Improper neutralization of special elements used in an SQL command ('SQL injecti…9.8critical02 Nov 2026

CVE-2026-113687Summary: Improper isolation or compartmentalization vulnerability in Apache Syncope. A…9.8critical02 Nov 2026