Vulnerability database

10,967 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-119978Summary: Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authen…9.0critical30 Oct 2026

CVE-2026-119777GStreamer8.8high30 Oct 2026

CVE-2026-119764Summary: Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerabil…7.4high30 Oct 2026

CVE-2026-119761Summary: Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-sit…5.3medium30 Oct 2026

CVE-2026-119760Summary: sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in reso…8.7high30 Oct 2026

CVE-2026-119619Summary: A vulnerability was found in 37954679 cak-filemanagement-system up to 5e64332464…5.5medium30 Oct 2026

CVE-2025-8574Database Cleaner: Cleanup, Optimization & Repair<= 1.4.78.7high30 Oct 2026

CVE-2026-61826Summary: Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14,…10.0critical30 Oct 2026

CVE-2026-61805Summary: Frappe Learning Management System (LMS) is a learning system that helps users st…5.3medium30 Oct 2026

CVE-2026-61804Summary: myTinyWMS is a free, open-source warehouse management system. Prior to version 1…8.1high30 Oct 2026

CVE-2026-61789Summary: DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB,…6.1medium30 Oct 2026

CVE-2026-55551Summary: ZAC is an open-source, workflow-based Common Ground component for Dutch municipa…6.5medium30 Oct 2026

CVE-2026-119300Summary: Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search p…6.5medium30 Oct 2026

CVE-2025-49602Keyfactor EJBCA9.8critical30 Oct 2026

CVE-2026-119720Blender6.8medium30 Oct 2026

CVE-2026-119719Blender8.5high30 Oct 2026

CVE-2026-119716Summary: pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulner…9.3critical30 Oct 2026

CVE-2026-119715Summary: NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any or…5.3medium30 Oct 2026

CVE-2026-119712Summary: PipesHub before 0.10.0 contains a server-side request forgery vulnerability in I…5.3medium30 Oct 2026

CVE-2026-119711Summary: PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp…6.9medium30 Oct 2026

CVE-2026-119708Summary: abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant authorization bypas…7.1high30 Oct 2026

CVE-2026-119707Summary: SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api…7.1high30 Oct 2026

CVE-2026-119704Summary: Bastille through 1.4.4 contains a symlink following vulnerability in the cp.sh,…5.3medium30 Oct 2026

CVE-2026-119703Summary: xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerabili…6.3medium30 Oct 2026

CVE-2026-119700Summary: WPGraphQL before 2.24.2 contains an information disclosure vulnerability that al…6.9medium30 Oct 2026