Vulnerability database

13,270 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-121946Summary: zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a CRLF head…6.9medium04 Nov 2026

CVE-2026-121945Summary: CoopCycle coopcycle-web before 6.20.1 contains a broken access control vulnerabi…7.2high04 Nov 2026

CVE-2026-121944Summary: sngrep through 1.9.0 contains an infinite loop vulnerability in capture_packet_r…6.8medium04 Nov 2026

CVE-2026-121943Summary: Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability…EPSS 5.6%6.3medium04 Nov 2026

CVE-2026-121942Summary: ZBar through 0.23.95 contains an out-of-bounds read vulnerability in _zbar_sq_de…6.9medium04 Nov 2026

CVE-2026-121941Summary: libmt32emu before 2.8.4 contains a heap buffer overflow vulnerability in MidiStr…8.5high04 Nov 2026

CVE-2026-121940Summary: Stonewuu ai-fusion-video before 1.3.0 contains an insecure direct object referen…8.7high04 Nov 2026

CVE-2026-121939Summary: Databasement before 1.10.9 contains an authentication bypass vulnerability in OA…9.2critical04 Nov 2026

CVE-2026-121938Summary: langchain4j-aideepin before 3.31.0 contains an insecure direct object reference…6.0medium04 Nov 2026

CVE-2026-121937Summary: loonflow before r3.2.3 contains a missing authorization vulnerability in TicketF…2.3low04 Nov 2026

CVE-2026-121936Summary: easyVoice before 0.0.23 contains a server-side request forgery vulnerability tha…6.9medium04 Nov 2026

CVE-2026-121620Summary: CoopCycle coopcycle-web 5.6.0 before 6.20.0 contains a missing authentication vu…8.3high04 Nov 2026

CVE-2026-121373Summary: The Symfony HtmlSanitizer component MetaRefreshAttributeSanitizer, introduced to…5.3medium04 Nov 2026

CVE-2026-121147Summary: This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to i…8.5high04 Nov 2026

CVE-2026-121146Summary: This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to t…6.8medium04 Nov 2026

CVE-2026-121145Summary: This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to i…7.1high04 Nov 2026

CVE-2026-121144Summary: This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to p…8.8high04 Nov 2026

CVE-2026-119481JetFormBuilder — Dynamic Blocks Form Builder<= 3.6.7.19.8critical04 Nov 2026

CVE-2026-119468Noptin – Newsletter, New Post Notifications & Email Automation<= 4.4.27.1high04 Nov 2026

CVE-2026-118516Summary: The Symfony Routing components CompiledUrlMatcher and UrlMatcher interpret the h…6.3medium04 Nov 2026

CVE-2026-118513Summary: Authentication bypass by spoofing in X509Authenticator and X509AuthenticationLis…7.7high04 Nov 2026

CVE-2026-107479Summary: An integer truncation vulnerability in the QTextCodec conversion functions of th…1.7low04 Nov 2026

CVE-2026-97397Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance<= 1.77.2high04 Nov 2026

CVE-2026-59267Apache Openoffice5.8medium04 Nov 2026

CVE-2026-121925Summary: A stack-based buffer overflow in libsnowflakeclient and the Snowflake PHP PDO Dr…6.6medium04 Nov 2026