Vulnerability database

9,245 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-118938Summary: In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying…8.8high30 Oct 2026

CVE-2026-62990Summary: Shopper is a Headless e-commerce Admin Panel. In versions from 2.0.0 prior to 2.…8.7high30 Oct 2026

CVE-2026-62967Summary: ZTNET is a ZeroTier web UI for private controllers with multiuser and organizati…8.1high30 Oct 2026

CVE-2026-62966Summary: ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32…7.5high30 Oct 2026

CVE-2026-62965Summary: SABnzbd is an open source automated Usenet download tool. Prior to 5.1.0Beta3, o…7.0high30 Oct 2026

CVE-2026-62863Summary: MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when…9.6critical30 Oct 2026

CVE-2026-62860Summary: Picsou is a self-hosted personal finance dashboard. In the affected login implem…5.3medium30 Oct 2026

CVE-2026-62853Summary: ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest…9.9critical30 Oct 2026

CVE-2026-62848Summary: Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#.…7.3high30 Oct 2026

CVE-2026-59993Summary: Picotls is a TLS protocol library that allows users select different crypto back…6.5medium30 Oct 2026

CVE-2026-58412Summary: Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin…8.2high30 Oct 2026

CVE-2026-54610Summary: LibreDWG is a free C library to read and write DWG files. Prior to 0.14, `bit_TV…3.3low30 Oct 2026

CVE-2026-40573Summary: NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Pri…8.6high30 Oct 2026

CVE-2026-119342Summary: Stirling-PDF is a locally hosted web application that facilitates various operat…5.3medium30 Oct 2026

CVE-2026-119340Summary: Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSeri…5.5medium30 Oct 2026

CVE-2026-119338Summary: Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygo…6.9medium30 Oct 2026

CVE-2026-117666Summary: Improper Validation of Certificate with Host Mismatch vulnerability in deadtrick…9.1critical30 Oct 2026

CVE-2026-117645Summary: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti…5.3medium30 Oct 2026

CVE-2026-62335Summary: OpenVM is a performant and modular zkVM framework built for customization and ex…6.9medium30 Oct 2026

CVE-2026-62333Summary: OpenVM is a performant and modular zkVM framework built for customization and ex…8.7high30 Oct 2026

CVE-2026-62301Summary: MyTube is a self-hosted downloader and player for several video websites. Prior…7.1high30 Oct 2026

CVE-2026-61850Summary: Kargo manages and automates the promotion of software artifacts. From 0.6.0 unti…PoC ×19.3critical30 Oct 2026

CVE-2026-61694Summary: go-xrpl is a Go implementation of the XRP Ledger protocol. In versions through t…3.7low30 Oct 2026

CVE-2026-61618Summary: SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accumulator pu…6.9medium30 Oct 2026

CVE-2026-55493Summary: HotCRP is conference review software. Starting with 2.101, the `cmt:` search ter…6.5medium30 Oct 2026