Vulnerability database

9,797 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-120251Summary: imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability…6.8medium01 Nov 2026

CVE-2026-120250Summary: OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vul…6.0medium01 Nov 2026

CVE-2026-120247Summary: FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability…6.8medium01 Nov 2026

CVE-2026-120246Summary: FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability…6.8medium01 Nov 2026

CVE-2026-120243Summary: FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability…6.8medium01 Nov 2026

CVE-2026-120190Summary: A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by…2.0low01 Nov 2026

CVE-2026-120189D-Link DIR-505EPSS 1.3%9.3critical01 Nov 2026

CVE-2026-115946Summary: XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an o…9.8critical01 Nov 2026

CVE-2026-120135Summary: Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This iss…8.2high31 Oct 2026

CVE-2026-118636Summary: **UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in the MINA 3.0 codec m…9.8critical31 Oct 2026

CVE-2026-118147Summary: Improper certificate validation in Visual Studio allows an unauthorized attacker…7.4high31 Oct 2026

CVE-2026-120210Summary: FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demu…5.3medium31 Oct 2026

CVE-2026-120207Summary: Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerabil…7.0high31 Oct 2026

CVE-2026-120206Summary: Thelia before 3.2.0 contains a cross-site request forgery vulnerability in the b…5.9medium31 Oct 2026

CVE-2026-120203Summary: ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock…8.7high31 Oct 2026

CVE-2026-120202Summary: Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerab…7.1high31 Oct 2026

CVE-2026-120201Dromara JpomEPSS 2.2%9.3critical31 Oct 2026

CVE-2026-120199Summary: LearnHouse before 1.1.1 contains a missing authorization vulnerability in the as…5.3medium31 Oct 2026

CVE-2026-102212Summary: Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware vers…8.4high31 Oct 2026

CVE-2026-78192Summary: WebDyne versions from 2.022 before 3.022 for Perl disclose application source to…7.5high31 Oct 2026

CVE-2026-78191Summary: WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhe…9.8critical31 Oct 2026

CVE-2026-78190Summary: WebDyne versions from 2.014 before 3.022 for Perl reflect request parameters une…6.1medium31 Oct 2026

CVE-2026-78189Summary: WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the…9.8critical31 Oct 2026

CVE-2026-78188Summary: WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without…5.4medium31 Oct 2026

CVE-2026-120194Summary: A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_qu…7.5high31 Oct 2026