Vulnerability database

13,370 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-120640Summary: CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDATA and XFo…6.5medium04 Nov 2026

CVE-2026-120639Summary: CGI versions before 5.00 for Perl allow HTTP header injection via entity decodin…7.2high04 Nov 2026

CVE-2026-120638Summary: CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding…6.1medium04 Nov 2026

CVE-2026-120637Summary: CGI versions before 5.00 for Perl take request parameters from the process comma…9.8critical04 Nov 2026

CVE-2026-120636Summary: CGI versions before 5.00 for Perl allow open redirects and script injection via…6.1medium04 Nov 2026

CVE-2026-120635Summary: CGI versions before 5.00 for Perl allow form fields to be smuggled past proxies…8.1high04 Nov 2026

CVE-2026-120634Summary: CGI::Carp versions before 5.00 for Perl leak warnings across requests in persist…6.5medium04 Nov 2026

CVE-2026-120633Summary: CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in ur…6.1medium04 Nov 2026

CVE-2026-120632Summary: CGI versions before 5.00 for Perl allow CPU exhaustion via a backtracking regex…6.5medium04 Nov 2026

CVE-2026-120631Summary: CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via…7.5high04 Nov 2026

CVE-2026-118628Summary: MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerab…8.2high04 Nov 2026

CVE-2026-118627Summary: MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Executi…7.8high04 Nov 2026

CVE-2026-118626Summary: MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnera…5.4medium04 Nov 2026

CVE-2026-118625Summary: MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability.…6.3medium04 Nov 2026

CVE-2026-118624Summary: MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnera…5.4medium04 Nov 2026

CVE-2026-118623Summary: MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Ex…7.8high04 Nov 2026

CVE-2026-114552Summary: MailEnable parseObjectResponse XML External Entity Processing Information Disclo…6.5medium04 Nov 2026

CVE-2026-114551Summary: MailEnable Auth Cleartext Storage Information Disclosure Vulnerability. This vul…5.9medium04 Nov 2026

CVE-2026-114550Summary: libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Co…8.1high04 Nov 2026

CVE-2026-114549Summary: NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerabi…9.8critical04 Nov 2026

CVE-2026-121736Summary: NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability…6.9medium03 Nov 2026

CVE-2026-121735Summary: blueprintUE self-hosted edition before 4.3.4 contains an insufficient session ex…6.3medium03 Nov 2026

CVE-2026-121734Summary: ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that…6.0medium03 Nov 2026

CVE-2026-121733Summary: Bagisto before 2.4.5 contains a stored cross-site scripting vulnerability that a…2.1low03 Nov 2026

CVE-2026-121732Summary: RosarioSIS before 12.9 contains an improper authorization vulnerability that all…2.1low03 Nov 2026