Vulnerability database

9,980 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-120046Summary: Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in Se…6.0medium30 Oct 2026

CVE-2026-119842GStreamer6.5medium30 Oct 2026

CVE-2026-119729GStreamer. An6.5medium30 Oct 2026

CVE-2026-119728Summary: A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a…6.5medium30 Oct 2026

CVE-2026-119727GStreamer6.5medium30 Oct 2026

CVE-2026-119978Summary: Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authen…9.0critical30 Oct 2026

CVE-2026-119777GStreamer8.8high30 Oct 2026

CVE-2026-119764Summary: Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerabil…7.4high30 Oct 2026

CVE-2026-119761Summary: Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-sit…5.3medium30 Oct 2026

CVE-2026-119760Summary: sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in reso…8.7high30 Oct 2026

CVE-2026-119619Summary: A vulnerability was found in 37954679 cak-filemanagement-system up to 5e64332464…5.5medium30 Oct 2026

CVE-2025-8574Database Cleaner: Cleanup, Optimization & Repair<= 1.4.78.7high30 Oct 2026

CVE-2026-61826Summary: Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14,…10.0critical30 Oct 2026

CVE-2026-61805Summary: Frappe Learning Management System (LMS) is a learning system that helps users st…5.3medium30 Oct 2026

CVE-2026-61804Summary: myTinyWMS is a free, open-source warehouse management system. Prior to version 1…8.1high30 Oct 2026

CVE-2026-61789Summary: DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB,…6.1medium30 Oct 2026

CVE-2026-55551Summary: ZAC is an open-source, workflow-based Common Ground component for Dutch municipa…6.5medium30 Oct 2026

CVE-2026-119300Summary: Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search p…6.5medium30 Oct 2026

CVE-2025-49602Keyfactor EJBCA9.8critical30 Oct 2026

CVE-2026-119720Blender6.8medium30 Oct 2026

CVE-2026-119719Blender8.5high30 Oct 2026

CVE-2026-119716Summary: pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulner…9.3critical30 Oct 2026

CVE-2026-119715Summary: NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any or…5.3medium30 Oct 2026

CVE-2026-119712Summary: PipesHub before 0.10.0 contains a server-side request forgery vulnerability in I…5.3medium30 Oct 2026

CVE-2026-119711Summary: PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp…6.9medium30 Oct 2026