Vulnerability database

15,870 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-44267Summary: Elo is a purely functional expression language for no-code tools. Prior to 1.0.1…PoC ×19.8critical03 Nov 2026

CVE-2026-44266Summary: Elo is a purely functional expression language for no-code tools. Prior to 1.0.1…9.8critical03 Nov 2026

CVE-2026-44265Summary: Elo is a purely functional expression language for no-code tools. Prior to 1.0.1…7.4high03 Nov 2026

CVE-2026-121628Summary: Bagisto before 2.3.16 and 2.4.x before 2.4.1 contains a race condition vulnerabi…6.3medium03 Nov 2026

CVE-2026-121627Summary: buku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerability in t…5.3medium03 Nov 2026

CVE-2026-121626Summary: GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vulnerability…6.3medium03 Nov 2026

CVE-2026-121625Summary: GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vulnerability…6.3medium03 Nov 2026

CVE-2026-121624Summary: Nanosystems Supremo for Windows and macOS before 5.0.2.3874 contains an improper…7.6high03 Nov 2026

CVE-2026-116845Summary: NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in…5.3medium03 Nov 2026

CVE-2026-39777WCFM Membership – WooCommerce Memberships for Multivendor Marketplace<= 2.12.04.3medium03 Nov 2026

CVE-2026-39743WCFM Membership – WooCommerce Memberships for Multivendor Marketplace<= 2.12.05.3medium03 Nov 2026

CVE-2026-38601Summary: A hardcoded session secret key in codeskyblue gohttpserver through v1.3.0 allows…7.5high03 Nov 2026

CVE-2026-38600Summary: A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver thr…9.8critical03 Nov 2026

CVE-2026-38595Summary: An issue in im3x Scriptables through v2-dev branch allows attackers to inject ar…9.8critical03 Nov 2026

CVE-2026-121631Summary: Lightdash 0.2609.0 before 3.137.0 contains an authorization bypass vulnerability…2.3low03 Nov 2026

CVE-2026-121604Summary: wlroots before 0.20.2 contains an out-of-bounds read vulnerability in read_surfa…4.8medium03 Nov 2026

CVE-2026-121603Summary: Solanum before commit 2ea1382 contains a buffer overflow vulnerability in ms_kil…8.5high03 Nov 2026

CVE-2026-121602Summary: Solanum before commit 2ce64de contains a heap-based buffer overflow vulnerabilit…8.5high03 Nov 2026

CVE-2026-121588Summary: TeXlyre from 0.11.0 before 0.13.5 contains a stored cross-site scripting vulnera…5.3medium03 Nov 2026

CVE-2026-121587Summary: Coolify before 4.1.1 contains an information disclosure vulnerability that allow…6.9medium03 Nov 2026

CVE-2026-121262Summary: A vulnerability was found in phpMyAdmin SQL-Parser 6.0.0/6.0.1. The affected ele…5.5medium03 Nov 2026

CVE-2026-121261Summary: A vulnerability has been found in phpMyAdmin ShapeFile up to 4.0.1. Impacted is…2.1low03 Nov 2026

CVE-2026-121259Summary: A flaw was found in the GStreamer JPEG 2000 decimator in gst-plugins-bad. Crafte…6.5medium03 Nov 2026

CVE-2026-120846Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT<= 7.7.15.3medium03 Nov 2026

CVE-2026-120843Posts Table with Search & Sort<= 1.4.146.5medium03 Nov 2026