Vulnerability database

3,278 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-92185Summary: Quest Foglight for Databases AbstractParser XML External Entity Processing Infor…EPSS 1.9%7.2high04 Nov 2026

CVE-2026-121583Sanluan PublicCMS2.1low04 Nov 2026

CVE-2026-120651Summary: CGI versions before 5.00 for Perl allow an infinite loop on a short request body…—unscored04 Nov 2026

CVE-2026-120650Summary: CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via miss…—unscored04 Nov 2026

CVE-2026-120648Summary: CGI versions before 5.00 for Perl allow HTML injection via text containing --> i…—unscored04 Nov 2026

CVE-2026-120647Summary: CGI versions before 5.00 for Perl allow Content-Disposition parameter injection…—unscored04 Nov 2026

CVE-2026-120646Summary: CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain…—unscored04 Nov 2026

CVE-2026-120645Summary: CGI versions before 5.00 for Perl allow denial of service via submitted values u…—unscored04 Nov 2026

CVE-2026-120644Summary: CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via u…—unscored04 Nov 2026

CVE-2026-120643Summary: CGI versions from 4.62 before 5.00 for Perl allow cross-site scripting via a raw…—unscored04 Nov 2026

CVE-2026-120642Summary: CGI versions before 5.00 for Perl return request-derived values untainted under…—unscored04 Nov 2026

CVE-2026-120641Summary: CGI versions before 5.00 for Perl return upload filenames with any client-suppli…—unscored04 Nov 2026

CVE-2026-120640Summary: CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDATA and XFo…—unscored04 Nov 2026

CVE-2026-120639Summary: CGI versions before 5.00 for Perl allow HTTP header injection via entity decodin…—unscored04 Nov 2026

CVE-2026-120638Summary: CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding…—unscored04 Nov 2026

CVE-2026-120637Summary: CGI versions before 5.00 for Perl take request parameters from the process comma…—unscored04 Nov 2026

CVE-2026-120636Summary: CGI versions before 5.00 for Perl allow open redirects and script injection via…—unscored04 Nov 2026

CVE-2026-120635Summary: CGI versions before 5.00 for Perl allow form fields to be smuggled past proxies…—unscored04 Nov 2026

CVE-2026-120634Summary: CGI::Carp versions before 5.00 for Perl leak warnings across requests in persist…—unscored04 Nov 2026

CVE-2026-120633Summary: CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in ur…—unscored04 Nov 2026

CVE-2026-120632Summary: CGI versions before 5.00 for Perl allow CPU exhaustion via a backtracking regex…—unscored04 Nov 2026

CVE-2026-120631Summary: CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via…—unscored04 Nov 2026

CVE-2026-118627Summary: MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Executi…7.8high04 Nov 2026

CVE-2026-118626Summary: MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnera…5.4medium04 Nov 2026

CVE-2026-118625Summary: MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability.…6.3medium04 Nov 2026