Vulnerability database

9,149 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-58412Summary: Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin…8.2high30 Oct 2026

CVE-2026-54610Summary: LibreDWG is a free C library to read and write DWG files. Prior to 0.14, `bit_TV…3.3low30 Oct 2026

CVE-2026-40573Summary: NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Pri…8.6high30 Oct 2026

CVE-2026-119342Summary: Stirling-PDF is a locally hosted web application that facilitates various operat…5.3medium30 Oct 2026

CVE-2026-119340Summary: Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSeri…5.5medium30 Oct 2026

CVE-2026-119338Summary: Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygo…6.9medium30 Oct 2026

CVE-2026-117666Summary: Improper Validation of Certificate with Host Mismatch vulnerability in deadtrick…9.1critical30 Oct 2026

CVE-2026-117645Summary: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti…5.3medium30 Oct 2026

CVE-2026-62335Summary: OpenVM is a performant and modular zkVM framework built for customization and ex…6.9medium30 Oct 2026

CVE-2026-62333Summary: OpenVM is a performant and modular zkVM framework built for customization and ex…8.7high30 Oct 2026

CVE-2026-62301Summary: MyTube is a self-hosted downloader and player for several video websites. Prior…7.1high30 Oct 2026

CVE-2026-61850Summary: Kargo manages and automates the promotion of software artifacts. From 0.6.0 unti…PoC ×19.3critical30 Oct 2026

CVE-2026-61694Summary: go-xrpl is a Go implementation of the XRP Ledger protocol. In versions through t…3.7low30 Oct 2026

CVE-2026-61618Summary: SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accumulator pu…6.9medium30 Oct 2026

CVE-2026-55493Summary: HotCRP is conference review software. Starting with 2.101, the `cmt:` search ter…6.5medium30 Oct 2026

CVE-2026-119730Summary: Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vu…5.1medium30 Oct 2026

CVE-2026-119337Summary: RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. From 0.25…7.1high30 Oct 2026

CVE-2026-119335Summary: Pi-hole is a DNS sinkhole that protects devices from unwanted content without in…7.8high30 Oct 2026

CVE-2026-119332Summary: Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701f…8.8high30 Oct 2026

CVE-2026-119330Summary: Immich is a high-performance self-hosted photo and video management solution. Pr…3.5low30 Oct 2026

CVE-2026-119328Summary: Immich is a high-performance self-hosted photo and video management solution. Pr…6.5medium30 Oct 2026

CVE-2026-116252Pgadmin 47.1high30 Oct 2026

CVE-2026-116251Pgadmin 42.3low30 Oct 2026

CVE-2026-116250Summary: In server mode pgAdmin 4 validates a path a user gives for a file in their stora…7.3high30 Oct 2026

CVE-2026-116249Summary: In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key…7.2high30 Oct 2026