Vulnerability database

2,829 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-92887Summary: Incorrect default value in the REST API framework's .rest.xml definition parser…—unscored05 Nov 2026

CVE-2026-85627Summary: Improper Neutralization of Special Elements Used in a Template Engine ('Server-S…—unscored05 Nov 2026

CVE-2026-84728Summary: Incorrect Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms,…—unscored05 Nov 2026

CVE-2026-84183Summary: Incorrect Authorization in the updateLayout simple-method in applications/conten…—unscored05 Nov 2026

CVE-2026-83542Summary: Improper Control of Generation of Code ('Code Injection') in Apache OFBiz 24.09…—unscored05 Nov 2026

CVE-2026-83538Summary: Missing Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms all…—unscored05 Nov 2026

CVE-2026-82960Summary: Improper Control of Generation of Code ('Code Injection') in ModelFormField in t…—unscored05 Nov 2026

CVE-2026-82916Summary: Missing Authorization in XmlDsDump in Apache OFBiz 24.09 before 24.09.08 on all…—unscored05 Nov 2026

CVE-2026-82912Summary: Improper Neutralization of Special Elements Used in an Expression Language State…—unscored05 Nov 2026

CVE-2026-82910Summary: Improper Neutralization of Special Elements Used in a Template Engine ('Server-S…—unscored05 Nov 2026

CVE-2026-82907Summary: Authentication Bypass by Capture-replay in ExternalLoginKeysManager in Apache OF…—unscored05 Nov 2026

CVE-2026-82904Summary: Uncontrolled Resource Consumption in ServiceMultiEventHandler in Apache OFBiz 24…—unscored05 Nov 2026

CVE-2026-82902Summary: Server-Side Request Forgery in ViewDataFile in Apache OFBiz 24.09 before 24.09.0…—unscored05 Nov 2026

CVE-2026-76563Summary: Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vu…6.1medium05 Nov 2026

CVE-2026-123059Summary: In Eclipse BaSyx Helm Charts version 2.2.0 of the `aas-basyx-v2-full` chart, dep…7.5high05 Nov 2026

CVE-2026-123028Summary: A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected b…5.5medium05 Nov 2026

CVE-2026-123024Summary: A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This im…5.5medium05 Nov 2026

CVE-2026-123023Summary: A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the…5.5medium05 Nov 2026

CVE-2026-123022Summary: A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impac…5.5medium05 Nov 2026

CVE-2026-117691Summary: A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. T…9.1critical05 Nov 2026

CVE-2026-114277Summary: Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz. A…—unscored05 Nov 2026

CVE-2026-114272Summary: Authorization Bypass Through User-Controlled Key in the content viewing componen…—unscored05 Nov 2026

CVE-2026-114271Summary: Authorization Bypass Through User-Controlled Key in the shopping list services i…—unscored05 Nov 2026

CVE-2026-114235Summary: Direct Request ('Forced Browsing') in the Order component in Apache OFBiz 24.09…—unscored05 Nov 2026

CVE-2026-114233Summary: Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before…—unscored05 Nov 2026