Vulnerability database

13,194 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-95652Summary: Execution with unnecessary privileges vulnerability in TÜBİTAK BİLGEM Software T…6.6medium05 Nov 2026

CVE-2026-123119Summary: The Symfony HttpClient component NoPrivateNetworkHttpClient does not pin the che…2.3low05 Nov 2026

CVE-2026-123047Summary: In Eclipse BaSyx Helm Charts versions 3.0.0-rc.1 to 3.12.1 of the `basyx` chart,…7.5high05 Nov 2026

CVE-2026-123020Summary: A security vulnerability has been detected in eosphoros-ai DB-GPT up to 0.8.1. T…2.1low05 Nov 2026

CVE-2026-103866Summary: Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling')…7.5high05 Nov 2026

CVE-2026-103864Summary: Improper output neutralization for logs in Apache Sling Engine. This issue af…7.5high05 Nov 2026

CVE-2026-103863Summary: Improper neutralization of input during web page generation ('cross-site scripti…5.4medium05 Nov 2026

CVE-2026-96677Summary: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti…10.0critical05 Nov 2026

CVE-2026-73117Summary: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitt…10.0critical05 Nov 2026

CVE-2026-73116Summary: Insufficiently Protected Credentials vulnerability in Apache Juneau. The Apache…10.0critical05 Nov 2026

CVE-2026-73101Summary: Generation of Error Message Containing Sensitive Information vulnerability in Ap…10.0critical05 Nov 2026

CVE-2026-73100Summary: Insertion of Sensitive Information into Log File vulnerability in Apache Juneau.…10.0critical05 Nov 2026

CVE-2026-73099Summary: Cross-Site Request Forgery (CSRF) vulnerability in Apache Juneau. The REST serv…10.0critical05 Nov 2026

CVE-2026-73098Summary: Improper control of dynamically-loaded code vulnerability in Apache Juneau. Whe…10.0critical05 Nov 2026

CVE-2026-73095Summary: Allocation of Resources Without Limits or Throttling vulnerability in Apache Jun…8.7high05 Nov 2026

CVE-2026-123019Summary: A weakness has been identified in eosphoros-ai DB-GPT up to 0.8.2. Impacted is t…5.5medium05 Nov 2026

CVE-2026-123018Summary: A security flaw has been discovered in eosphoros-ai DB-GPT up to 0.8.2. This iss…5.5medium05 Nov 2026

CVE-2026-121489Summary: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v…10.0critical05 Nov 2026

CVE-2026-123036Summary: A flaw was found in ansible-core. When a task marked `no_log: true` fails, the t…5.5medium05 Nov 2026

CVE-2026-118869Summary: An OS command injection vulnerability exists in SHIRASAGI, which may allow an au…EPSS 1.1%8.7high05 Nov 2026

CVE-2026-117679Summary: A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an aut…5.1medium05 Nov 2026

CVE-2026-112072Summary: vault-java-driver, a Java client for HashiCorp Vault, parses Vault's JSON respon…6.5medium05 Nov 2026

CVE-2026-109408Summary: vault-java-driver, a Java client for HashiCorp Vault, silently disables TLS cert…7.4high05 Nov 2026

CVE-2026-107776Dokan< 5.3.32.2low05 Nov 2026

CVE-2026-100109Security For WooCommerce<= 1.0.16PoC ×19.8critical05 Nov 2026