Vulnerability database

2,829 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-114229Summary: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti…—unscored05 Nov 2026

CVE-2026-109928Summary: Incorrect Implementation of Authentication Algorithm in the password-reset and l…—unscored05 Nov 2026

CVE-2026-109856Summary: Direct Request ('Forced Browsing') to Financial Account services in Apache OFBiz…—unscored05 Nov 2026

CVE-2026-109837Summary: Authorization Bypass Through User-Controlled Key in Order Returns in Apache OFBi…—unscored05 Nov 2026

CVE-2026-109129Summary: Authorization Bypass Through User-Controlled Key in the Order Manager component…—unscored05 Nov 2026

CVE-2026-107912Summary: A flaw was found in the management interface of the Quarkus framework, specifica…7.7high05 Nov 2026

CVE-2026-105461Summary: Missing check for ORDERMGR_UPDATE in ordermgr allows user with only ORDERMGR_VI…—unscored05 Nov 2026

CVE-2026-105330Summary: Use of Hard-coded Cryptographic Key in JWT token authentication in Apache OFBiz…—unscored05 Nov 2026

CVE-2026-105325Summary: Missing check for ACCOUNTING_UPDATE / ACCOUNTING_CREATE in accounting in allow…—unscored05 Nov 2026

CVE-2026-105321Summary: Improper neutralization of special elements used in an SQL command ('SQL injecti…7.5high05 Nov 2026

CVE-2026-104720Summary: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v…7.5high05 Nov 2026

CVE-2026-100228Summary: Improper Input Validation in Order Returns in Apache OFBiz 24.09.07 on all platf…—unscored05 Nov 2026

CVE-2026-100168Summary: Direct Request ('Forced Browsing') in the Content Manager component in Apache OF…—unscored05 Nov 2026

CVE-2026-95652Summary: Execution with unnecessary privileges vulnerability in TÜBİTAK BİLGEM Software T…6.6medium05 Nov 2026

CVE-2026-123119Summary: The Symfony HttpClient component NoPrivateNetworkHttpClient does not pin the che…2.3low05 Nov 2026

CVE-2026-123047Summary: In Eclipse BaSyx Helm Charts versions 3.0.0-rc.1 to 3.12.1 of the `basyx` chart,…7.5high05 Nov 2026

CVE-2026-123020Summary: A security vulnerability has been detected in eosphoros-ai DB-GPT up to 0.8.1. T…2.1low05 Nov 2026

CVE-2026-103866Summary: Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling')…—unscored05 Nov 2026

CVE-2026-103864Summary: Improper output neutralization for logs in Apache Sling Engine. This issue af…—unscored05 Nov 2026

CVE-2026-103863Summary: Improper neutralization of input during web page generation ('cross-site scripti…—unscored05 Nov 2026

CVE-2026-96677Summary: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti…10.0critical05 Nov 2026

CVE-2026-73117Summary: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitt…10.0critical05 Nov 2026

CVE-2026-73116Summary: Insufficiently Protected Credentials vulnerability in Apache Juneau. The Apache…10.0critical05 Nov 2026

CVE-2026-73101Summary: Generation of Error Message Containing Sensitive Information vulnerability in Ap…10.0critical05 Nov 2026

CVE-2026-73100Summary: Insertion of Sensitive Information into Log File vulnerability in Apache Juneau.…10.0critical05 Nov 2026