Vulnerability database

3,007 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-91163Summary: Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior t…3.7low04 Nov 2026

CVE-2026-122032Summary: SPIP before 4.4.29 contains a SQL injection vulnerability that allows authentica…7.1high04 Nov 2026

CVE-2026-121967Summary: Coder 2.28.0 before 2.29.22, 2.30.0 before 2.34.13, 2.35.0 before 2.35.10, 2.36.…2.3low04 Nov 2026

CVE-2026-121966Summary: Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (…7.0high04 Nov 2026

CVE-2026-121965Summary: Parse Server before 8.6.113 and 9.0.0 before 9.10.6-alpha.5 contains a prototype…6.0medium04 Nov 2026

CVE-2026-121964Freerdp8.7high04 Nov 2026

CVE-2026-121963Summary: FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronou…8.2high04 Nov 2026

CVE-2026-121962Summary: FreeRDP before 3.32.2 contains a heap buffer overflow in transport_default_read_…7.2high04 Nov 2026

CVE-2026-121961Summary: FreeRDP before 3.32.2 contains a use-after-free vulnerability in the freerdp-pro…8.2high04 Nov 2026

CVE-2026-121960Summary: FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enab…8.7high04 Nov 2026

CVE-2026-121959Summary: FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocket_conte…7.1high04 Nov 2026

CVE-2026-121958Summary: FreeRDP through 3.32.1 has a heap out-of-bounds write in the RDPGFX client becau…8.7high04 Nov 2026

CVE-2026-121957Summary: FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malici…8.7high04 Nov 2026

CVE-2026-121956Summary: FreeRDP before 3.32.2 contains a double free in the WinPR Kerberos SSPI retrieve…8.7high04 Nov 2026

CVE-2026-121955Summary: FreeRDP before 3.32.2 contains a use-after-free vulnerability in Emulate_SCardRe…8.7high04 Nov 2026

CVE-2026-121954Summary: FreeRDP before 3.32.2 has a heap out-of-bounds write in the planar codec because…7.1high04 Nov 2026

CVE-2026-121953Summary: FreeRDP before 3.32.2 has a use-after-free in the client's rdpgfx dynamic virtua…9.3critical04 Nov 2026

CVE-2026-121952Summary: FreeRDP before 3.32.2 has an out-of-bounds write in the proxy because rdp_read_b…9.3critical04 Nov 2026

CVE-2026-121951Summary: FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips the six-byt…8.7high04 Nov 2026

CVE-2026-121950Summary: FreeRDP before 3.32.2 does not check the product of surface dimensions in gdi_Cr…7.1high04 Nov 2026

CVE-2026-119746Summary: ProSoft Technology ICX35 devices (X35-HWC-A and ICX35-HWC-E) contain a login loc…8.2high04 Nov 2026

CVE-2026-109518Summary: On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who c…7.7high04 Nov 2026

CVE-2026-106554Summary: One CBOR-parsing issue in jackson-dataformats-binary's CBOR module: an unbounded…—unscored04 Nov 2026

CVE-2026-39431Summary: On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions avai…—unscored04 Nov 2026

CVE-2026-39430Summary: On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator authenticat…—unscored04 Nov 2026