Vulnerability database

15,878 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-121549Summary: nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread…4.1medium03 Nov 2026

CVE-2026-121546Summary: ruTorrent before 5.3.20 contains a path traversal vulnerability in the datadir p…6.0medium03 Nov 2026

CVE-2026-121545Summary: Dreeve before 5.8.0 contains a missing authentication vulnerability in StravaWeb…6.9medium03 Nov 2026

CVE-2026-121455Summary: DbGate before 7.3.3 contains a missing authorization vulnerability that allows c…5.3medium03 Nov 2026

CVE-2026-121454Summary: Padloc before 4.3.1 contains a missing authentication vulnerability in ScimServe…6.3medium03 Nov 2026

CVE-2026-121451Summary: AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerab…8.7high03 Nov 2026

CVE-2026-121450Summary: CFNext before 3.1.0 contains a weak cryptographic derivation vulnerability that…7.7high03 Nov 2026

CVE-2026-119741Samba Rsync8.7high03 Nov 2026

CVE-2026-121447Summary: svg-sanitizer before 1.1.0 contains a cross-site scripting vulnerability that al…5.3medium03 Nov 2026

CVE-2026-121446Summary: svg-sanitizer from 0.5.0 before 1.1.0 contains an incomplete filtering vulnerabi…5.3medium03 Nov 2026

CVE-2026-121443Summary: svg-sanitizer from 1.1.0 before 1.1.1 contains a denial of service vulnerability…6.9medium03 Nov 2026

CVE-2026-121442Summary: Frappe HRMS before 15.61.0 contains a permission bypass vulnerability that allow…5.3medium03 Nov 2026

CVE-2026-121439Summary: Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 contains a response split…6.9medium03 Nov 2026

CVE-2026-121438Summary: Mistune before 3.3.3 contains a denial of service vulnerability in InlineParser.…6.9medium03 Nov 2026

CVE-2026-121435Summary: Froxlor before 2.3.15 contains an authorization bypass vulnerability that allows…5.3medium03 Nov 2026

CVE-2026-121434Summary: Froxlor 2.3.0 before 2.3.15 contains a missing authorization check in the Certif…5.3medium03 Nov 2026

CVE-2026-121431Summary: AzuraCast before 0.24.0 contains a server-side request forgery vulnerability tha…6.9medium03 Nov 2026

CVE-2026-121430Summary: AzuraCast before 0.24.0 contains a missing authorization vulnerability in the GE…5.3medium03 Nov 2026

CVE-2026-121427Summary: AzuraCast through 0.23.8 fails to remove frontend_config.custom_config in PUT /s…8.7high03 Nov 2026

CVE-2026-121426Summary: Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in…8.3high03 Nov 2026

CVE-2026-121423Summary: SurrealDB before 3.3.0 contains an unbounded recursion vulnerability that allows…7.1high03 Nov 2026

CVE-2026-121422Summary: SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnera…5.1medium03 Nov 2026

CVE-2026-121419Summary: SurrealDB from 3.1.0 before 3.3.0 contains an improper authentication vulnerabil…8.6high03 Nov 2026

CVE-2026-121418Summary: SurrealDB from 3.1.0 before 3.3.0 contains an incorrect authorization vulnerabil…5.3medium03 Nov 2026

CVE-2026-121415Summary: Parse Server before 8.6.111 and 9.0.0 before 9.10.6-alpha.3 on MongoDB skips fie…6.3medium03 Nov 2026