Vulnerability database

3,278 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-121955Summary: FreeRDP before 3.32.2 contains a use-after-free vulnerability in Emulate_SCardRe…8.7high04 Nov 2026

CVE-2026-121954Summary: FreeRDP before 3.32.2 has a heap out-of-bounds write in the planar codec because…7.1high04 Nov 2026

CVE-2026-121953Summary: FreeRDP before 3.32.2 has a use-after-free in the client's rdpgfx dynamic virtua…9.3critical04 Nov 2026

CVE-2026-121952Summary: FreeRDP before 3.32.2 has an out-of-bounds write in the proxy because rdp_read_b…9.3critical04 Nov 2026

CVE-2026-121951Summary: FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips the six-byt…8.7high04 Nov 2026

CVE-2026-121950Summary: FreeRDP before 3.32.2 does not check the product of surface dimensions in gdi_Cr…7.1high04 Nov 2026

CVE-2026-119746Summary: ProSoft Technology ICX35 devices (X35-HWC-A and ICX35-HWC-E) contain a login loc…8.2high04 Nov 2026

CVE-2026-109518Summary: On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who c…7.7high04 Nov 2026

CVE-2026-106554Summary: One CBOR-parsing issue in jackson-dataformats-binary's CBOR module: an unbounded…—unscored04 Nov 2026

CVE-2026-39431Summary: On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions avai…—unscored04 Nov 2026

CVE-2026-39430Summary: On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator authenticat…—unscored04 Nov 2026

CVE-2026-122008Summary: Oqtane Framework before 10.3.0 contains a server-side request forgery vulnerabil…5.3medium04 Nov 2026

CVE-2026-122007Summary: Oqtane Framework before 10.3.0 contains a broken access control vulnerability in…7.4high04 Nov 2026

CVE-2026-122006Summary: The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachm…PoC ×19.8critical04 Nov 2026

CVE-2026-121640Summary: An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint…9.1critical04 Nov 2026

CVE-2026-121639Summary: A Missing Authentication for Critical Function vulnerability in WatchGuard AuthP…9.2critical04 Nov 2026

CVE-2026-121638Summary: An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway…9.1critical04 Nov 2026

CVE-2026-121637Summary: An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's…8.9high04 Nov 2026

CVE-2026-121632Summary: Data::MuForm versions through 0.05 for Perl render attribute values and option l…—unscored04 Nov 2026

CVE-2026-121009Summary: SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip the injecti…—unscored04 Nov 2026

CVE-2026-121008Summary: SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-site script…—unscored04 Nov 2026

CVE-2026-121007Summary: SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow SQL inject…—unscored04 Nov 2026

CVE-2026-120421Summary: In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.…6.1medium04 Nov 2026

CVE-2026-119776Summary: In all prior released versions of FRRouting, the OSPFv3 (for IPv6) implementatio…6.1medium04 Nov 2026

CVE-2026-114627Summary: Web::Simple versions before 0.036 for Perl do not escape values interpolated int…—unscored04 Nov 2026