Vulnerability database

3,007 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-122008Summary: Oqtane Framework before 10.3.0 contains a server-side request forgery vulnerabil…5.3medium04 Nov 2026

CVE-2026-122007Summary: Oqtane Framework before 10.3.0 contains a broken access control vulnerability in…7.4high04 Nov 2026

CVE-2026-122006Summary: The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachm…PoC ×19.8critical04 Nov 2026

CVE-2026-121640Summary: An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint…9.1critical04 Nov 2026

CVE-2026-121639Summary: A Missing Authentication for Critical Function vulnerability in WatchGuard AuthP…9.2critical04 Nov 2026

CVE-2026-121638Summary: An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway…9.1critical04 Nov 2026

CVE-2026-121637Summary: An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's…8.9high04 Nov 2026

CVE-2026-121632Summary: Data::MuForm versions through 0.05 for Perl render attribute values and option l…—unscored04 Nov 2026

CVE-2026-121009Summary: SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip the injecti…—unscored04 Nov 2026

CVE-2026-121008Summary: SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-site script…—unscored04 Nov 2026

CVE-2026-121007Summary: SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow SQL inject…—unscored04 Nov 2026

CVE-2026-120421Summary: In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.…6.1medium04 Nov 2026

CVE-2026-119776Summary: In all prior released versions of FRRouting, the OSPFv3 (for IPv6) implementatio…6.1medium04 Nov 2026

CVE-2026-114627Summary: Web::Simple versions before 0.036 for Perl do not escape values interpolated int…—unscored04 Nov 2026

CVE-2026-100408Summary: Git for Windows is the Windows port of Git. From 2.43.0.windows.1 until 2.55.0.w…4.4medium04 Nov 2026

CVE-2026-100407Summary: Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.w…4.4medium04 Nov 2026

CVE-2026-121993wePOS – Point Of Sale (POS) for WooCommerce & Dokan< 2.0.35.3medium04 Nov 2026

CVE-2026-119745Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce< 2.11.35.3medium04 Nov 2026

CVE-2026-118391Summary: Allocation of Resources Without Limits or Throttling vulnerability in elixir-ect…8.9high04 Nov 2026

CVE-2026-65555Uncanny Toolkit for LearnDash<= 3.8.29.8critical04 Nov 2026

CVE-2026-121970Pay with Vipps and MobilePay for WooCommerce< 6.4.16.3medium04 Nov 2026

CVE-2026-121946Summary: zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a CRLF head…6.9medium04 Nov 2026

CVE-2026-121945Summary: CoopCycle coopcycle-web before 6.20.1 contains a broken access control vulnerabi…7.2high04 Nov 2026

CVE-2026-121944Summary: sngrep through 1.9.0 contains an infinite loop vulnerability in capture_packet_r…6.8medium04 Nov 2026

CVE-2026-121943Summary: Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability…6.3medium04 Nov 2026