Vulnerability database

12,836 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-114232Summary: A flaw was found in the UserManagedPermissionService of the Keycloak authorizati…8.1high05 Nov 2026

CVE-2026-112208Summary: A flaw was found in the Organization identity-first login flow of the Keycloak a…8.1high05 Nov 2026

CVE-2026-111253Summary: A flaw was found in dnf5daemon-server. Session methods on dynamically exported D…6.6medium05 Nov 2026

CVE-2026-110932Summary: A flaw was found in the theme resource endpoint of Keycloak, an open-source iden…7.5high05 Nov 2026

CVE-2026-110931Summary: A flaw was found in the SAML 1.1 assertion parser of Keycloak, a tool used for i…7.5high05 Nov 2026

CVE-2026-107602Summary: A flaw was found in the SAML 1.1 XML parsing logic of Keycloak, an open-source i…7.5high05 Nov 2026

CVE-2026-107123Summary: A flaw was found in the SAML XML processing component of Keycloak, an open-sourc…7.5high05 Nov 2026

CVE-2026-104867Summary: Immich is a high-performance self-hosted photo and video management solution. Fr…4.3medium05 Nov 2026

CVE-2026-103112Summary: A flaw was found in the authentication session handling of the keycloak-services…7.5high05 Nov 2026

CVE-2026-102739Summary: ESPectre is a Wi-Fi motion sensing platform for ESP32. Prior to 3.0.0-rc1, Micro…7.8high05 Nov 2026

CVE-2026-85286Summary: HomeBox is a home inventory and organization system. Prior to 0.27.0, the POST /…3.7low05 Nov 2026

CVE-2026-73856Summary: ModSecurity is an open source, cross platform web application firewall (WAF) eng…8.6high05 Nov 2026

CVE-2026-70660Summary: stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable…6.9medium05 Nov 2026

CVE-2026-70659Summary: stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable…7.8high05 Nov 2026

CVE-2026-61813Summary: ModSecurity is an open source, cross platform web application firewall (WAF) eng…3.7low05 Nov 2026

CVE-2026-123158Openbsd OpensshCISA KEVPoC ×25EPSS 16.5%8.1high05 Nov 2026

CVE-2026-123125Summary: The Symfony Validator component IpValidator incompletely classifies internal add…6.3medium05 Nov 2026

CVE-2026-123096Summary: anacrolix/torrent through 1.61.0 contains a memory exhaustion vulnerability in t…7.1high05 Nov 2026

CVE-2026-123095Summary: mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bund…7.7high05 Nov 2026

CVE-2026-123094Summary: Huginn before 2026.11.05 contains a stored cross-site scripting vulnerability in…5.1medium05 Nov 2026

CVE-2026-122330Summary: Blosc c-blosc2 before 3.5.0 contains a divide-by-zero vulnerability in blosc2_sc…6.8medium05 Nov 2026

CVE-2026-122329Summary: SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLa…8.5high05 Nov 2026

CVE-2026-122328Summary: SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerabili…8.5high05 Nov 2026

CVE-2026-122327Summary: Meelo through 3.13.1 contains a missing authorization vulnerability that allows…5.3medium05 Nov 2026

CVE-2026-122326Summary: Chevereto before 4.5.8 contains an authorization bypass vulnerability in the get…6.9medium05 Nov 2026