Vulnerability database

3,007 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2025-71456Summary: vtenext before 25.02.2 contains an SQL injection vulnerability that allows authe…8.6high04 Nov 2026

CVE-2025-71455Summary: vtenext before 25.02.2 contains a session identifier disclosure vulnerability th…5.9medium04 Nov 2026

CVE-2025-71454Summary: vtenext before 25.02.2 contains a cross-site request forgery protection bypass b…6.9medium04 Nov 2026

CVE-2025-71453Summary: vtenext before 25.02.2 contains a reflected cross-site scripting vulnerability i…5.1medium04 Nov 2026

CVE-2026-97705Summary: Moleculer is a progressive microservices framework for Node.js. Prior to 0.14.36…7.5high04 Nov 2026

CVE-2026-76806Summary: Solidtime is an open-source time-tracking app. Prior to 0.16.0, TogglDataImporte…6.3medium04 Nov 2026

CVE-2026-122220WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)< 45.29.1critical04 Nov 2026

CVE-2026-122192Summary: Improper handling of a failed memory remap in Firecracker versions 0.23.0 throug…7.1high04 Nov 2026

CVE-2026-121933Summary: A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function sav…9.3critical04 Nov 2026

CVE-2026-115574Summary: Zulip is an open-source team collaboration tool. From 11.0 until 12.2, organizat…5.3medium04 Nov 2026

CVE-2026-115474Summary: Zulip is an open-source team collaboration tool. From 8.0 until 12.2, in organiz…6.5medium04 Nov 2026

CVE-2026-113374Summary: Sonatype Nexus Repository 3 does not require realm administration permission whe…8.6high04 Nov 2026

CVE-2026-113373Summary: Sonatype Nexus Repository 3 Pro does not check the local account status when a u…9.1critical04 Nov 2026

CVE-2026-113372Summary: Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or gr…7.1high04 Nov 2026

CVE-2026-113371Summary: Sonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repo…7.1high04 Nov 2026

CVE-2026-113370Summary: Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the option…7.7high04 Nov 2026

CVE-2026-113369Summary: Sonatype Nexus Repository 3 allows a user account that can push manifests to a h…6.3medium04 Nov 2026

CVE-2026-113368Summary: Sonatype Nexus Repository 3 does not check that a user account is authorized to…5.3medium04 Nov 2026

CVE-2026-97701Summary: Zulip is an open-source team collaboration tool. In Zulip Server versions throug…6.5medium04 Nov 2026

CVE-2026-82033Summary: DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contai…8.6high04 Nov 2026

CVE-2026-82029Summary: Invoice Ninja before 5.13.28 contains a broken access control vulnerability that…7.1high04 Nov 2026

CVE-2026-63183Summary: OmniAuth is a flexible authentication system utilizing Rack middleware. Prior to…6.9medium04 Nov 2026

CVE-2026-122148Summary: In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a…8.2high04 Nov 2026

CVE-2026-122124Summary: On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term phy…6.1medium04 Nov 2026

CVE-2026-122120Summary: In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file wr…9.0critical04 Nov 2026