Vulnerability database

9,046 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-63338Summary: IXP Manager is a full-stack web application for managing Internet Exchange Point…8.3high30 Oct 2026

CVE-2026-63224Summary: OpenRemote is an open-source internet-of-things platform. Prior to 1.26.0, the `…7.2high30 Oct 2026

CVE-2026-63182Summary: LightSAML implements SAML 2.0 data model classes, XML serialization and deserial…8.1high30 Oct 2026

CVE-2026-63121Summary: Kubewarden policies is a collection of WebAssembly policies for securing and gov…6.3medium30 Oct 2026

CVE-2026-62347Summary: Element Call is a native Matrix video conferencing application. From 0.16.0 unti…5.9medium30 Oct 2026

CVE-2026-55614Summary: uhttpd is a small HTTP server. In unpatched repository snapshots, `client_parse_…6.9medium30 Oct 2026

CVE-2026-55613Summary: uhttpd is a small HTTP server. In unpatched repository snapshots, `uh_ubus_data_…6.9medium30 Oct 2026

CVE-2026-55146Summary: LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web app…4.3medium30 Oct 2026

CVE-2026-16760Summary: In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle…8.8high30 Oct 2026

CVE-2026-118938Summary: In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying…8.8high30 Oct 2026

CVE-2026-62990Summary: Shopper is a Headless e-commerce Admin Panel. In versions from 2.0.0 prior to 2.…8.7high30 Oct 2026

CVE-2026-62967Summary: ZTNET is a ZeroTier web UI for private controllers with multiuser and organizati…8.1high30 Oct 2026

CVE-2026-62966Summary: ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32…7.5high30 Oct 2026

CVE-2026-62965Summary: SABnzbd is an open source automated Usenet download tool. Prior to 5.1.0Beta3, o…7.0high30 Oct 2026

CVE-2026-62863Summary: MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when…9.6critical30 Oct 2026

CVE-2026-62860Summary: Picsou is a self-hosted personal finance dashboard. In the affected login implem…5.3medium30 Oct 2026

CVE-2026-62853Summary: ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest…9.9critical30 Oct 2026

CVE-2026-62848Summary: Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#.…7.3high30 Oct 2026

CVE-2026-59993Summary: Picotls is a TLS protocol library that allows users select different crypto back…6.5medium30 Oct 2026

CVE-2026-58412Summary: Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin…8.2high30 Oct 2026

CVE-2026-54610Summary: LibreDWG is a free C library to read and write DWG files. Prior to 0.14, `bit_TV…3.3low30 Oct 2026

CVE-2026-40573Summary: NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Pri…8.6high30 Oct 2026

CVE-2026-119342Summary: Stirling-PDF is a locally hosted web application that facilitates various operat…5.3medium30 Oct 2026

CVE-2026-119340Summary: Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSeri…5.5medium30 Oct 2026

CVE-2026-119338Summary: Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygo…6.9medium30 Oct 2026