Vulnerability database

2,829 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-73099Summary: Cross-Site Request Forgery (CSRF) vulnerability in Apache Juneau. The REST serv…10.0critical05 Nov 2026

CVE-2026-73098Summary: Improper control of dynamically-loaded code vulnerability in Apache Juneau. Whe…10.0critical05 Nov 2026

CVE-2026-73095Summary: Allocation of Resources Without Limits or Throttling vulnerability in Apache Jun…8.7high05 Nov 2026

CVE-2026-123019Summary: A weakness has been identified in eosphoros-ai DB-GPT up to 0.8.2. Impacted is t…5.5medium05 Nov 2026

CVE-2026-123018Summary: A security flaw has been discovered in eosphoros-ai DB-GPT up to 0.8.2. This iss…5.5medium05 Nov 2026

CVE-2026-121489Summary: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v…10.0critical05 Nov 2026

CVE-2026-123036Summary: A flaw was found in ansible-core. When a task marked `no_log: true` fails, the t…5.5medium05 Nov 2026

CVE-2026-118869Summary: An OS command injection vulnerability exists in SHIRASAGI, which may allow an au…8.7high05 Nov 2026

CVE-2026-117679Summary: A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an aut…5.1medium05 Nov 2026

CVE-2026-112072Summary: vault-java-driver, a Java client for HashiCorp Vault, parses Vault's JSON respon…6.5medium05 Nov 2026

CVE-2026-109408Summary: vault-java-driver, a Java client for HashiCorp Vault, silently disables TLS cert…7.4high05 Nov 2026

CVE-2026-107776Dokan< 5.3.32.2low05 Nov 2026

CVE-2026-100109Security For WooCommerce9.8critical05 Nov 2026

CVE-2026-123033Summary: Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS…8.3high05 Nov 2026

CVE-2026-123029Summary: Wowza Streaming Engine before 4.12.2 processes XML external entities, which allo…7.5high05 Nov 2026

CVE-2026-123025Summary: An OS Command Injection vulnerability was discovered in the Google Cloud DNS val…9.4critical05 Nov 2026

CVE-2026-123017Summary: GodotSteam 4.17 through 4.23.2 trusts the peer value of 1 to mean that a player…6.5medium05 Nov 2026

CVE-2026-91049EWWW Image Optimizer<= 8.9.0—unscored05 Nov 2026

CVE-2026-90967Essential Real Estate< 5.3.5—unscored05 Nov 2026

CVE-2026-90966Essential Real Estate< 5.3.5—unscored05 Nov 2026

CVE-2026-90965Essential Real Estate< 5.3.5—unscored05 Nov 2026

CVE-2026-90964Essential Real Estate< 5.3.5—unscored05 Nov 2026

CVE-2026-90963Essential Real Estate< 5.3.5—unscored05 Nov 2026

CVE-2026-88814YITH WooCommerce Gift Cards< 4.38.1—unscored05 Nov 2026

CVE-2026-87856Subscriptions for WooCommerce< 2.1.1—unscored05 Nov 2026