Vulnerability database

13,089 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-115740Summary: Server side request forgery vulnerability exists in the DLP on-prem extensions v…5.3medium05 Nov 2026

CVE-2026-115739Summary: Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions…6.0medium05 Nov 2026

CVE-2026-107891Summary: musl libc before 1.2.7, when an untrusted regular expression is used with regcom…8.1high05 Nov 2026

CVE-2026-104269Summary: ModSecurity is an open source, cross platform web application firewall (WAF) eng…8.6high05 Nov 2026

CVE-2026-103932Summary: ModSecurity is an open source, cross platform web application firewall (WAF) eng…5.8medium05 Nov 2026

CVE-2026-102615Summary: HeyForm is an open-source form builder. Prior to 3.0.1, /api/upload accepts a fi…7.6high05 Nov 2026

CVE-2026-102523Summary: MariaDB server is a community developed fork of MySQL server. From 10.11.1 until…8.0high05 Nov 2026

CVE-2020-9709Summary: Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have a security b…8.8high05 Nov 2026

CVE-2019-16447Summary: Adobe Illustrator CC versions 23.1 and earlier have a binary planting vulnerabil…7.8high05 Nov 2026

CVE-2026-82894Summary: Improper Authorization in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on…7.5high05 Nov 2026

CVE-2026-81828Summary: Server-Side Request Forgery in SurveyWrapper in Apache OFBiz 24.09 before 24.09.…8.1high05 Nov 2026

CVE-2026-81816Summary: XML External Entity (XXE) Injection in ContentWorker in Apache OFBiz 24.09 befor…3.5low05 Nov 2026

CVE-2026-81815Summary: SQL Injection in the entity engine's generic performFind service in Apache OFBiz…9.8critical05 Nov 2026

CVE-2026-81808Summary: Missing Authorization in ProductSearchEvents in Apache OFBiz 24.09 before 24.09.…6.5medium05 Nov 2026

CVE-2026-81744Summary: Incorrect Authorization in ContentPermissionServices in Apache OFBiz 24.09 befor…6.5medium05 Nov 2026

CVE-2026-81734Summary: Missing Authorization in ProductEvents in Apache OFBiz 24.09 before 24.09.08 on…6.5medium05 Nov 2026

CVE-2026-76152Summary: Path traversal and missing authorization check in the imageCrop and imageRotate…6.5medium05 Nov 2026

CVE-2026-76150Summary: Path traversal and missing authorization check in the replaceImageToExistImage s…6.5medium05 Nov 2026

CVE-2026-74841Summary: In multitenant deployments, ContextFilter and LoginWorker built a per-tenant del…9.1critical05 Nov 2026

CVE-2026-73580Summary: Missing authorization check in the getHRChild service in Apache OFBiz through 24…5.3medium05 Nov 2026

CVE-2026-73578Summary: Missing authorization enforcement in RequestHandler.renderView in Apache OFBiz 2…7.5high05 Nov 2026

CVE-2026-73577Summary: Incorrect authorization in RequestHandler in Apache OFBiz 24.09 before 24.09.08…7.5high05 Nov 2026

CVE-2026-71901Summary: Improper Control of Resource Identifiers ('Resource Injection') vulnerability in…8.1high05 Nov 2026

CVE-2026-68524Summary: An unauthenticated attacker can exploit temporary-file handling, access an open…7.5high05 Nov 2026

CVE-2026-66903Summary: Authenticated Path Traversal in Catalog Image Management allows writing image fi…6.5medium05 Nov 2026