Vulnerability database

5,602 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-119712Summary: PipesHub before 0.10.0 contains a server-side request forgery vulnerability in I…5.3medium30 Oct 2026

CVE-2026-119711Summary: PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp…6.9medium30 Oct 2026

CVE-2026-119708Summary: abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant authorization bypas…7.1high30 Oct 2026

CVE-2026-119707Summary: SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api…7.1high30 Oct 2026

CVE-2026-119704Summary: Bastille through 1.4.4 contains a symlink following vulnerability in the cp.sh,…5.3medium30 Oct 2026

CVE-2026-119703Summary: xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerabili…6.3medium30 Oct 2026

CVE-2026-119700Summary: WPGraphQL before 2.24.2 contains an information disclosure vulnerability that al…6.9medium30 Oct 2026

CVE-2026-119699Summary: WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption…6.9medium30 Oct 2026

CVE-2026-119291Summary: Zuke is a code-first, strongly typed build automation system for Deno. Prior to…5.5medium30 Oct 2026

CVE-2026-119287Summary: Zuke is a code-first, strongly typed build automation system for Deno. Prior to…8.0high30 Oct 2026

CVE-2026-104065Summary: Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds write vuln…8.5high30 Oct 2026

CVE-2026-104064Summary: Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an integer overflow vulnera…8.5high30 Oct 2026

CVE-2026-104061Summary: Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap out-of-bounds write…8.5high30 Oct 2026

CVE-2026-61738Summary: SOCFortress CoPilot focuses on providing a single pane of glass for all your sec…10.0critical30 Oct 2026

CVE-2026-61729Summary: SOCFortress CoPilot focuses on providing a single pane of glass for all your sec…9.4critical30 Oct 2026

CVE-2026-61728Summary: SOCFortress CoPilot focuses on providing a single pane of glass for all your sec…9.9critical30 Oct 2026

CVE-2026-61626Summary: libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alph…7.3high30 Oct 2026

CVE-2026-46499Summary: Collabora Online is a collaborative online office suite based on LibreOffice tec…4.3medium30 Oct 2026

CVE-2026-45144Summary: Chamilo LMS is an open-source learning management system. From 2.0.0 until 2.0.1…8.9high30 Oct 2026

CVE-2026-44344Summary: Chamilo LMS is an open-source learning management system. In the 1.x line before…6.6medium30 Oct 2026

CVE-2026-119664Summary: Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vu…5.3medium30 Oct 2026

CVE-2026-119663Summary: Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vul…5.3medium30 Oct 2026

CVE-2026-119660Summary: MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows…9.3critical30 Oct 2026

CVE-2026-119659Summary: Blossom through 1.17.1 contains an authorization bypass vulnerability that allow…5.3medium30 Oct 2026

CVE-2026-119656Summary: CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vu…8.7high30 Oct 2026