Vulnerability database

15,882 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-120442Summary: ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that…PoC ×1EPSS 1.7%9.3critical02 Nov 2026

CVE-2026-120439Summary: QuickJS-NG before 0.16.0 contains an integer overflow in js_typed_array_sort() i…8.3high02 Nov 2026

CVE-2026-120438Summary: QuickJS-NG before 0.16.0 contains an integer overflow in js_proxy_get_own_proper…8.5high02 Nov 2026

CVE-2026-120435Summary: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains…8.5high02 Nov 2026

CVE-2026-120434Summary: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains…8.5high02 Nov 2026

CVE-2026-120431Summary: Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains…8.5high02 Nov 2026

CVE-2026-120430Summary: Camaleon CMS before 2.9.2 contains an insecure direct object reference vulnerabi…5.3medium02 Nov 2026

CVE-2026-120427Summary: MrDoc through 1.1.1 contains a missing authorization vulnerability in the get_do…5.3medium02 Nov 2026

CVE-2026-120426Summary: OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability…8.7high02 Nov 2026

CVE-2025-71450Summary: inih before r63 contains a one-byte stack buffer under-read in ini_parse_stream(…4.8medium02 Nov 2026

CVE-2025-62819Summary: Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when se…6.5medium02 Nov 2026

CVE-2026-120463Summary: Warracker before 1.0.4 contains a missing authorization vulnerability in its Pap…6.0medium02 Nov 2026

CVE-2026-114364Summary: Improper neutralization of special elements used in an SQL command ('SQL injecti…9.8critical02 Nov 2026

CVE-2026-113687Summary: Improper isolation or compartmentalization vulnerability in Apache Syncope. A…9.8critical02 Nov 2026

CVE-2026-113511Summary: Authorization bypass through User-Controlled key vulnerability in Apache Syncope…9.1critical02 Nov 2026

CVE-2026-111959Summary: Out-of-bounds read vulnerability in Apache Arrow Rust (`arrow` crate), from vers…9.1critical02 Nov 2026

CVE-2026-110535Summary: Improper Privilege Management vulnerability in Apache Syncope. AuthProfile se…8.8high02 Nov 2026

CVE-2026-109083Summary: Improper isolation or compartmentalization vulnerability in Apache Syncope. An…9.8critical02 Nov 2026

CVE-2026-91910Dell Openmanage Enterprise5.7medium02 Nov 2026

CVE-2026-91907Dell Openmanage Enterprise6.1medium02 Nov 2026

CVE-2026-91904Dell Openmanage Enterprise5.5medium02 Nov 2026

CVE-2026-91903Dell Openmanage Enterprise6.1medium02 Nov 2026

CVE-2026-116606Barracuda Email Security Gateway 300 FirmwareCISA KEVPoC ×3EPSS 8.9%9.3critical02 Nov 2026

CVE-2026-111560Barracuda Email Security Gateway 300 FirmwareCISA KEVPoC ×2EPSS 6.2%8.6high02 Nov 2026

CVE-2024-12141Summary: The product fails to sufficiently validate callback URLs, allowing them to be ma…4.3medium02 Nov 2026