Vulnerability database

5,593 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-61846Summary: Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 sp…6.3medium30 Oct 2026

CVE-2026-61586Summary: Copernik XML Factory provides secure-by-default JAXP factory creation for Java.…8.2high30 Oct 2026

CVE-2026-46560Summary: Open Access Management (OpenAM) is an access management solution. Prior to 16.1.…7.5high30 Oct 2026

CVE-2026-120046Summary: Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in Se…6.0medium30 Oct 2026

CVE-2026-119842GStreamer6.5medium30 Oct 2026

CVE-2026-119729GStreamer. An6.5medium30 Oct 2026

CVE-2026-119728Summary: A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a…6.5medium30 Oct 2026

CVE-2026-119727GStreamer6.5medium30 Oct 2026

CVE-2026-119777GStreamer8.8high30 Oct 2026

CVE-2026-119764Summary: Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerabil…7.4high30 Oct 2026

CVE-2026-119760Summary: sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in reso…8.7high30 Oct 2026

CVE-2025-8574Database Cleaner: Cleanup, Optimization & Repair<= 1.4.78.7high30 Oct 2026

CVE-2026-61826Summary: Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14,…10.0critical30 Oct 2026

CVE-2026-61805Summary: Frappe Learning Management System (LMS) is a learning system that helps users st…5.3medium30 Oct 2026

CVE-2026-119300Summary: Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search p…6.5medium30 Oct 2026

CVE-2025-49602Keyfactor EJBCA9.8critical30 Oct 2026

CVE-2026-119719Blender8.5high30 Oct 2026

CVE-2026-119715Summary: NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any or…5.3medium30 Oct 2026

CVE-2026-119712Summary: PipesHub before 0.10.0 contains a server-side request forgery vulnerability in I…5.3medium30 Oct 2026

CVE-2026-119711Summary: PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp…6.9medium30 Oct 2026

CVE-2026-119708Summary: abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant authorization bypas…7.1high30 Oct 2026

CVE-2026-119707Summary: SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api…7.1high30 Oct 2026

CVE-2026-119704Summary: Bastille through 1.4.4 contains a symlink following vulnerability in the cp.sh,…5.3medium30 Oct 2026

CVE-2026-119703Summary: xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerabili…6.3medium30 Oct 2026

CVE-2026-119700Summary: WPGraphQL before 2.24.2 contains an information disclosure vulnerability that al…6.9medium30 Oct 2026