Vulnerability database

12,679 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-123032Summary: A security flaw has been discovered in OpenBMB Internet of Agents up to 9d78e88e…5.5medium05 Nov 2026

CVE-2026-119744Summary: Cendio ThinLinc contains an improper authentication vulnerability in its browser…7.7high05 Nov 2026

CVE-2026-115738Summary: SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlie…7.1high05 Nov 2026

CVE-2026-106716Summary: ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl su…6.5medium05 Nov 2026

CVE-2026-106715Summary: NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in…5.4medium05 Nov 2026

CVE-2026-106714Summary: Chewy for Android version 26.23.0 does not adequately validate the host of a pro…8.1high05 Nov 2026

CVE-2026-106713Summary: An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obt…7.5high05 Nov 2026

CVE-2026-97356Summary: External Control of File Name or Path vulnerability in the ViewFile component of…6.5medium05 Nov 2026

CVE-2026-97355Summary: Use of Hard-coded Password vulnerability in the AdminServer component in Apache…6.5medium05 Nov 2026

CVE-2026-92887Summary: Incorrect default value in the REST API framework's .rest.xml definition parser…7.3high05 Nov 2026

CVE-2026-85627Summary: Improper Neutralization of Special Elements Used in a Template Engine ('Server-S…8.8high05 Nov 2026

CVE-2026-84728Summary: Incorrect Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms,…5.4medium05 Nov 2026

CVE-2026-84183Summary: Incorrect Authorization in the updateLayout simple-method in applications/conten…8.8high05 Nov 2026

CVE-2026-83542Summary: Improper Control of Generation of Code ('Code Injection') in Apache OFBiz 24.09…PoC ×2EPSS 1.1%9.8critical05 Nov 2026

CVE-2026-83538Summary: Missing Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms all…5.3medium05 Nov 2026

CVE-2026-82960Summary: Improper Control of Generation of Code ('Code Injection') in ModelFormField in t…8.8high05 Nov 2026

CVE-2026-82916Summary: Missing Authorization in XmlDsDump in Apache OFBiz 24.09 before 24.09.08 on all…7.1high05 Nov 2026

CVE-2026-82912Summary: Improper Neutralization of Special Elements Used in an Expression Language State…8.8high05 Nov 2026

CVE-2026-82910Summary: Improper Neutralization of Special Elements Used in a Template Engine ('Server-S…8.8high05 Nov 2026

CVE-2026-82907Summary: Authentication Bypass by Capture-replay in ExternalLoginKeysManager in Apache OF…9.8critical05 Nov 2026

CVE-2026-82904Summary: Uncontrolled Resource Consumption in ServiceMultiEventHandler in Apache OFBiz 24…7.5high05 Nov 2026

CVE-2026-82902Summary: Server-Side Request Forgery in ViewDataFile in Apache OFBiz 24.09 before 24.09.0…4.3medium05 Nov 2026

CVE-2026-76563Summary: Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vu…6.1medium05 Nov 2026

CVE-2026-123059Summary: In Eclipse BaSyx Helm Charts version 2.2.0 of the `aas-basyx-v2-full` chart, dep…7.5high05 Nov 2026

CVE-2026-123028Summary: A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected b…5.5medium05 Nov 2026