Vulnerability database

13,232 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-122220WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)< 45.29.1critical04 Nov 2026

CVE-2026-122192Summary: Improper handling of a failed memory remap in Firecracker versions 0.23.0 throug…7.1high04 Nov 2026

CVE-2026-121933Summary: A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function sav…9.3critical04 Nov 2026

CVE-2026-115574Summary: Zulip is an open-source team collaboration tool. From 11.0 until 12.2, organizat…5.3medium04 Nov 2026

CVE-2026-115474Summary: Zulip is an open-source team collaboration tool. From 8.0 until 12.2, in organiz…6.5medium04 Nov 2026

CVE-2026-113374Summary: Sonatype Nexus Repository 3 does not require realm administration permission whe…8.6high04 Nov 2026

CVE-2026-113373Summary: Sonatype Nexus Repository 3 Pro does not check the local account status when a u…9.1critical04 Nov 2026

CVE-2026-113372Summary: Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or gr…7.1high04 Nov 2026

CVE-2026-113371Summary: Sonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repo…7.1high04 Nov 2026

CVE-2026-113370Summary: Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the option…7.7high04 Nov 2026

CVE-2026-113369Summary: Sonatype Nexus Repository 3 allows a user account that can push manifests to a h…6.3medium04 Nov 2026

CVE-2026-113368Summary: Sonatype Nexus Repository 3 does not check that a user account is authorized to…5.3medium04 Nov 2026

CVE-2026-97701Summary: Zulip is an open-source team collaboration tool. In Zulip Server versions throug…6.5medium04 Nov 2026

CVE-2026-82033Summary: DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contai…8.6high04 Nov 2026

CVE-2026-82029Summary: Invoice Ninja before 5.13.28 contains a broken access control vulnerability that…7.1high04 Nov 2026

CVE-2026-63183Summary: OmniAuth is a flexible authentication system utilizing Rack middleware. Prior to…6.9medium04 Nov 2026

CVE-2026-122148Summary: In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a…8.2high04 Nov 2026

CVE-2026-122124Summary: On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term phy…6.1medium04 Nov 2026

CVE-2026-122120Summary: In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file wr…9.0critical04 Nov 2026

CVE-2026-121932Summary: A vulnerability was detected in Linksys E5350 1.0.00.037. This affects the funct…EPSS 2.4%9.3critical04 Nov 2026

CVE-2026-121931Summary: A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impac…EPSS 2.7%8.5high04 Nov 2026

CVE-2026-121930Summary: A weakness has been identified in Linksys WRT54GL 4.30.18. The affected element…EPSS 2.7%8.5high04 Nov 2026

CVE-2026-121929Summary: A security flaw has been discovered in EmpireSoft EmpireCMS up to 8.0. Impacted…2.0low04 Nov 2026

CVE-2026-121928InfiniFlow RAGFlow2.0low04 Nov 2026

CVE-2026-113783Summary: ESP-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.…7.4high04 Nov 2026