Vulnerability database

13,175 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-122329Summary: SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLa…8.5high05 Nov 2026

CVE-2026-122328Summary: SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerabili…8.5high05 Nov 2026

CVE-2026-122327Summary: Meelo through 3.13.1 contains a missing authorization vulnerability that allows…5.3medium05 Nov 2026

CVE-2026-122326Summary: Chevereto before 4.5.8 contains an authorization bypass vulnerability in the get…6.9medium05 Nov 2026

CVE-2026-122325Summary: fossasia eventyay-exhibition through commit f68888e contains an authorization by…2.3low05 Nov 2026

CVE-2026-122324Summary: SplitPro through 2.1.6 contains an authorization bypass vulnerability that allow…2.3low05 Nov 2026

CVE-2026-122317Summary: SplitPro through 2.1.6 contains an authorization bypass vulnerability that allow…5.3medium05 Nov 2026

CVE-2026-121139Summary: The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability…7.3high05 Nov 2026

CVE-2026-119751Content Egg – Affiliate Product Importer & Price Comparison< 12.1.06.9medium05 Nov 2026

CVE-2026-119345Summary: Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI per…7.2high05 Nov 2026

CVE-2026-119344Summary: Cocos AI is a confidential computing system for AI. In version 0.8.2 and earlier…9.1critical05 Nov 2026

CVE-2026-115740Summary: Server side request forgery vulnerability exists in the DLP on-prem extensions v…5.3medium05 Nov 2026

CVE-2026-115739Summary: Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions…6.0medium05 Nov 2026

CVE-2026-107891Summary: musl libc before 1.2.7, when an untrusted regular expression is used with regcom…8.1high05 Nov 2026

CVE-2026-104269Summary: ModSecurity is an open source, cross platform web application firewall (WAF) eng…8.6high05 Nov 2026

CVE-2026-103932Summary: ModSecurity is an open source, cross platform web application firewall (WAF) eng…5.8medium05 Nov 2026

CVE-2026-102615Summary: HeyForm is an open-source form builder. Prior to 3.0.1, /api/upload accepts a fi…7.6high05 Nov 2026

CVE-2026-102523Summary: MariaDB server is a community developed fork of MySQL server. From 10.11.1 until…8.0high05 Nov 2026

CVE-2020-9709Summary: Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have a security b…8.8high05 Nov 2026

CVE-2019-16447Summary: Adobe Illustrator CC versions 23.1 and earlier have a binary planting vulnerabil…7.8high05 Nov 2026

CVE-2026-82894Summary: Improper Authorization in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on…7.5high05 Nov 2026

CVE-2026-81828Summary: Server-Side Request Forgery in SurveyWrapper in Apache OFBiz 24.09 before 24.09.…8.1high05 Nov 2026

CVE-2026-81816Summary: XML External Entity (XXE) Injection in ContentWorker in Apache OFBiz 24.09 befor…3.5low05 Nov 2026

CVE-2026-81815Summary: SQL Injection in the entity engine's generic performFind service in Apache OFBiz…9.8critical05 Nov 2026

CVE-2026-81808Summary: Missing Authorization in ProductSearchEvents in Apache OFBiz 24.09 before 24.09.…6.5medium05 Nov 2026