Vulnerability database

15,870 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-63469Summary: fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to…9.3critical03 Nov 2026

CVE-2026-63434Summary: MyTube is a self-hosted downloader and player for several video websites. Prior…4.3medium03 Nov 2026

CVE-2026-63433Summary: MyTube is a self-hosted downloader and player for several video websites. Prior…6.8medium03 Nov 2026

CVE-2026-54161Summary: Network UPS Tools is a collection of programs which provide a common interface f…8.1high03 Nov 2026

CVE-2026-45146Summary: Chamilo LMS is an open-source learning management system. Prior to 1.11.40 and 2…7.2high03 Nov 2026

CVE-2026-121577Summary: Inefficient Regular Expression Complexity (CWE-1333) in generate_regex() (whatst…6.7medium03 Nov 2026

CVE-2026-120567Summary: The MongoDB Entity Framework Core provider does not neutralize special elements…2.3low03 Nov 2026

CVE-2026-105822Summary: The Tapo Cloud MQTT proxy contains a server-side request forgery (SSRF) vulnerab…8.3high03 Nov 2026

CVE-2026-105821Summary: The Tapo Cloud MQTT broker contains a broken access control vulnerability in a p…8.3high03 Nov 2026

CVE-2025-71452Summary: Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vul…5.1medium03 Nov 2026

CVE-2025-71451Summary: Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vul…5.1medium03 Nov 2026

CVE-2026-82976Summary: A flaw was found in the image-customization-controller used in OpenShift's bare…7.1high03 Nov 2026

CVE-2026-63417Summary: Logging Redactor is a Python library designed to redact sensitive data in logs b…8.2high03 Nov 2026

CVE-2026-63198Summary: traQ is a messenger application built for Digital Creators Club traP. Prior to 3…7.3high03 Nov 2026

CVE-2026-63197Summary: traQ is a messenger application built for Digital Creators Club traP. Prior to 3…7.3high03 Nov 2026

CVE-2026-57154Summary: OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11 and…8.1high03 Nov 2026

CVE-2026-46487Summary: GeoNetwork is a catalog application to manage spatially referenced resources. Fr…7.5high03 Nov 2026

CVE-2026-39379Summary: GeoNetwork is a catalog application to manage spatially referenced resources. Fr…7.1high03 Nov 2026

CVE-2026-121652Summary: Cross-site scripting (XSS) issue in AWS Amplify maplibre-gl-js-amplify before 4.…4.8medium03 Nov 2026

CVE-2026-121501Summary: A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project. The a…2.1low03 Nov 2026

CVE-2026-119922Summary: Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1…8.7high03 Nov 2026

CVE-2026-112917Summary: In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux conta…9.2critical03 Nov 2026

CVE-2026-63499Summary: zt-zip is a Java library that provides convenience methods for ZIP archive manip…6.9medium03 Nov 2026

CVE-2026-63436Summary: zt-zip is a Java library that provides convenience methods for ZIP archive manip…6.1medium03 Nov 2026

CVE-2026-63418Summary: Monitoring Plugins is a suite of plugins for monitoring applications. From 3.0.0…7.0high03 Nov 2026