Vulnerability database

15,882 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-106805Summary: A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establi…7.5high02 Nov 2026

CVE-2026-99231Summary: In the Linux kernel, the following vulnerability has been resolved: io_uring/wa…7.8high02 Nov 2026

CVE-2026-99230Summary: In the Linux kernel, the following vulnerability has been resolved: io_uring/cm…—unscored02 Nov 2026

CVE-2026-99229Summary: In the Linux kernel, the following vulnerability has been resolved: io_uring/wa…—unscored02 Nov 2026

CVE-2026-99228Summary: In the Linux kernel, the following vulnerability has been resolved: io_uring/io…—unscored02 Nov 2026

CVE-2026-77880Summary: Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command inje…8.5high02 Nov 2026

CVE-2026-77879Summary: Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vu…8.4high02 Nov 2026

CVE-2026-77876Summary: Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command inje…EPSS 2.3%8.7high02 Nov 2026

CVE-2026-16306Summary: Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare C…9.8critical02 Nov 2026

CVE-2026-120501Summary: An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerability in t…6.9medium02 Nov 2026

CVE-2026-114408Summary: In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built w…8.7high02 Nov 2026

CVE-2026-104080Summary: Control Web Panel (CWP) before webpanel_version 1.29 contains an OS command inje…EPSS 1.2%8.5high02 Nov 2026

CVE-2026-73695Summary: Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal v…8.7high02 Nov 2026

CVE-2026-120492Summary: Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows…6.3medium02 Nov 2026

CVE-2026-120488Summary: LaraDashboard before 1.4.9 contains a stored cross-site scripting vulnerability…5.1medium02 Nov 2026

CVE-2026-120487Summary: LaraDashboard before 1.4.5 contains an incorrect authorization vulnerability in…8.6high02 Nov 2026

CVE-2026-120459Summary: python-jose through 3.5.0 contains an authentication bypass vulnerability that a…9.1critical02 Nov 2026

CVE-2026-120458Summary: Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_header() i…6.8medium02 Nov 2026

CVE-2026-120455Summary: rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseE…6.9medium02 Nov 2026

CVE-2026-120454Summary: The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability…6.8medium02 Nov 2026

CVE-2026-120451Summary: libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vu…7.0high02 Nov 2026

CVE-2026-120450Summary: LaraDashboard 1.4.0 before 1.4.9 contains an improper authorization vulnerabilit…5.3medium02 Nov 2026

CVE-2026-120447Summary: HotGo 2.8.4 through 2.15.1 contains an authentication bypass vulnerability that…9.2critical02 Nov 2026

CVE-2026-120446Summary: madong-admin-saas through 5.1.4 contains a missing authentication vulnerability…PoC ×1EPSS 1.0%8.8high02 Nov 2026

CVE-2026-120443Summary: GoFound through 1.4.1 contains a stored cross-site scripting vulnerability that…5.1medium02 Nov 2026