Vulnerability database

9,910 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-82115Summary: Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSo…6.3medium01 Nov 2026

CVE-2026-120242Summary: A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208…1.9low01 Nov 2026

CVE-2026-120241Ruijie RG-ES205GC7.7high01 Nov 2026

CVE-2026-120238Summary: A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects t…EPSS 1.7%8.6high01 Nov 2026

CVE-2026-120237Summary: A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected by this iss…2.1low01 Nov 2026

CVE-2026-74760Summary: Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization co…8.8high01 Nov 2026

CVE-2026-74759Summary: Google::Auth versions 0.12 for Perl allow server side request forgery via unvali…9.8critical01 Nov 2026

CVE-2026-120234Summary: A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. This impact…2.1low01 Nov 2026

CVE-2026-120233Summary: A security flaw has been discovered in ag-ui-protocol ag-ui up to 0.0.58. This a…5.5medium01 Nov 2026

CVE-2026-120230WAVLINK WN701AEEPSS 2.2%8.6high01 Nov 2026

CVE-2026-120229Summary: A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue aff…EPSS 2.8%8.5high01 Nov 2026

CVE-2026-120226Summary: A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAP…1.9low01 Nov 2026

CVE-2026-13575Summary: HTTP::Session versions before 0.54 for Perl allow memcached command injection vi…5.6medium01 Nov 2026

CVE-2026-120225Summary: A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected b…8.5high01 Nov 2026

CVE-2026-120263Summary: When `[oauth2_client].ACCOUNT_LINKING` is set to `auto` (not the default) and re…9.8critical01 Nov 2026

CVE-2026-119627Summary: The web profile and RSS/Atom feed routes of users and organizations checked only…4.3medium01 Nov 2026

CVE-2026-119625Summary: The `/{username}` web route accepted personal access tokens over HTTP Basic auth…4.3medium01 Nov 2026

CVE-2026-119533Summary: Repository and organization project boards listed the pull requests that referen…7.5high01 Nov 2026

CVE-2026-119441Summary: `DELETE /api/v1/orgs/{org}/repos` deletes all repositories of an organization, b…7.5high01 Nov 2026

CVE-2026-118504Summary: The web interface blocks issue and pull request changes on archived repositories…6.5medium01 Nov 2026

CVE-2026-118395Summary: Gitea 1.27.3 stopped personal access tokens restricted to public resources (`pub…7.5high01 Nov 2026

CVE-2026-118394Summary: The OAuth2 userinfo endpoint (`/login/oauth/userinfo`) decided whether to limit…4.3medium01 Nov 2026

CVE-2026-118386Summary: Workflows triggered by a pull request review were read from the commit named in…6.5medium01 Nov 2026

CVE-2026-117685Summary: The OCI registry's cross-repository blob mount checked the target package agains…9.1critical01 Nov 2026

CVE-2026-117677Summary: When parsing an uploaded Helm chart, Gitea decompressed the archive and read eve…6.5medium01 Nov 2026