Vulnerability database

15,900 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-120427Summary: MrDoc through 1.1.1 contains a missing authorization vulnerability in the get_do…5.3medium02 Nov 2026

CVE-2026-120426Summary: OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability…8.7high02 Nov 2026

CVE-2025-71450Summary: inih before r63 contains a one-byte stack buffer under-read in ini_parse_stream(…4.8medium02 Nov 2026

CVE-2025-62819Summary: Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when se…6.5medium02 Nov 2026

CVE-2026-120463Summary: Warracker before 1.0.4 contains a missing authorization vulnerability in its Pap…6.0medium02 Nov 2026

CVE-2026-114364Summary: Improper neutralization of special elements used in an SQL command ('SQL injecti…9.8critical02 Nov 2026

CVE-2026-113687Summary: Improper isolation or compartmentalization vulnerability in Apache Syncope. A…9.8critical02 Nov 2026

CVE-2026-113511Summary: Authorization bypass through User-Controlled key vulnerability in Apache Syncope…9.1critical02 Nov 2026

CVE-2026-111959Summary: Out-of-bounds read vulnerability in Apache Arrow Rust (`arrow` crate), from vers…9.1critical02 Nov 2026

CVE-2026-110535Summary: Improper Privilege Management vulnerability in Apache Syncope. AuthProfile se…8.8high02 Nov 2026

CVE-2026-109083Summary: Improper isolation or compartmentalization vulnerability in Apache Syncope. An…9.8critical02 Nov 2026

CVE-2026-91910Dell Openmanage Enterprise5.7medium02 Nov 2026

CVE-2026-91907Dell Openmanage Enterprise6.1medium02 Nov 2026

CVE-2026-91904Dell Openmanage Enterprise5.5medium02 Nov 2026

CVE-2026-91903Dell Openmanage Enterprise6.1medium02 Nov 2026

CVE-2026-116606Barracuda Email Security Gateway 300 FirmwareCISA KEVPoC ×3EPSS 8.9%9.3critical02 Nov 2026

CVE-2026-111560Barracuda Email Security Gateway 300 FirmwareCISA KEVPoC ×2EPSS 6.2%8.6high02 Nov 2026

CVE-2024-12141Summary: The product fails to sufficiently validate callback URLs, allowing them to be ma…4.3medium02 Nov 2026

CVE-2024-9517Summary: The refresh token grant type in WSO2 products fails to re-validate account statu…4.9medium02 Nov 2026

CVE-2025-12544Summary: The Publisher portal fails to enforce proper validation on uploaded SVG files, a…4.8medium02 Nov 2026

CVE-2024-2372Summary: The affected components accept user-supplied input for constructing redirection…5.4medium02 Nov 2026

CVE-2025-13647Summary: The affected component fails to enforce expected validation constraints on the `…5.8medium02 Nov 2026

CVE-2024-7075Summary: The user search function within the management console fails to properly encode…4.6medium02 Nov 2026

CVE-2026-120347Summary: A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the…5.5medium02 Nov 2026

CVE-2026-120345WAVLINK WN551X3-A M51X3_V251020-WO-182e965.EPSS 2.0%9.3critical02 Nov 2026