Vulnerability database

3,278 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-102703Summary: [This CNA information record relates to multiple CVEs; the text explains which a…4.4medium04 Nov 2026

CVE-2026-100302Summary: Allocation of Resources Without Limits or Throttling in the multiRead request ha…7.1high04 Nov 2026

CVE-2026-100300Summary: Improper handling of exceptional conditions in the quota subsystem of Apache Zoo…8.7high04 Nov 2026

CVE-2026-100252Summary: Improper Authorization vulnerability in Apache ZooKeeper. When SASL authenticat…8.6high04 Nov 2026

CVE-2026-100235Summary: Incorrect authorization due to a time-of-check to time-of-use (TOCTOU) race cond…6.0medium04 Nov 2026

CVE-2026-95649Summary: IRISPowerscan insufficiently restrict the use of untrusted scripts. An authentic…6.1medium04 Nov 2026

CVE-2026-94460Summary: IRISPowerscan contain an insecure default configuration where the built-in insta…7.2high04 Nov 2026

CVE-2026-94459Summary: IRISPowerscan contain default user accounts with predictable credentials. An una…7.2high04 Nov 2026

CVE-2026-93900Simple CAPTCHA with Cloudflare Turnstile<= 1.44.36.4medium04 Nov 2026

CVE-2026-120554Import and export users and customers<= 2.5.118.8high04 Nov 2026

CVE-2026-120422Summary: Sogou Input Method for Windows contains a vulnerability in the configuration ret…8.9high04 Nov 2026

CVE-2026-115498Slim Jetpack<= 2.7.0.17.2high04 Nov 2026

CVE-2026-111822Summary: Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ,…—unscored04 Nov 2026

CVE-2026-111821Summary: Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ Kaha…—unscored04 Nov 2026

CVE-2026-111040Summary: The platform allows persistent HTML injection into editable fields managed by Ti…5.1medium04 Nov 2026

CVE-2026-111038Summary: CSV formula injection vulnerability in the export functionality of the Coupa Sup…7.3high04 Nov 2026

CVE-2026-111037Summary: A reflected Cross-Site Scripting (XSS) vulnerability in the Tenders module of th…5.1medium04 Nov 2026

CVE-2026-111036Summary: Server-side request forgery (SSRF) vulnerability in the Coupa Supplier Portal Sa…8.4high04 Nov 2026

CVE-2026-110935Summary: The PFI plugin framework deployment routine does not validate path components wh…8.6high04 Nov 2026

CVE-2026-110022Summary: The PFI plugin framework deploys executable assemblies (DLLs) from a signed plug…8.6high04 Nov 2026

CVE-2026-110021Summary: PLCnext Engineer checks GSDX manifest reference digests but does not cryptograph…6.9medium04 Nov 2026

CVE-2026-108949Summary: Denial of Service via OOM vulnerability in Apache ActiveMQ, ActiveMQ Broker.…6.5medium04 Nov 2026

CVE-2026-19731Summary: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v…3.3low04 Nov 2026

CVE-2026-19721Summary: Improper restriction of XML external entity reference vulnerability in TÜBİTAK B…3.3low04 Nov 2026

CVE-2026-114426Summary: SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interfa…8.7high04 Nov 2026