Vulnerability database

5,826 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-119651Summary: HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerabi…5.3medium30 Oct 2026

CVE-2026-119648Summary: Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization…5.3medium30 Oct 2026

CVE-2026-119647Summary: RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in S…5.3medium30 Oct 2026

CVE-2026-119644Summary: Blossom through 1.17.1 contains an authorization bypass vulnerability that allow…5.3medium30 Oct 2026

CVE-2026-112905Summary: Vvveb is a powerful and easy to use CMS with page builder to build websites, blo…9.0critical30 Oct 2026

CVE-2015-20130Summary: Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site…5.1medium30 Oct 2026

CVE-2026-91915Dell Openmanage Enterprise6.8medium30 Oct 2026

CVE-2026-91914Dell Openmanage Enterprise7.1high30 Oct 2026

CVE-2026-91913Dell Openmanage EnterpriseEPSS 2.7%8.8high30 Oct 2026

CVE-2026-91912Dell Openmanage Enterprise6.5medium30 Oct 2026

CVE-2026-119601Summary: AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_ge…6.9medium30 Oct 2026

CVE-2026-119600Summary: tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows u…6.3medium30 Oct 2026

CVE-2026-119597Summary: OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability t…9.3critical30 Oct 2026

CVE-2026-119596Summary: UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZ…5.3medium30 Oct 2026

CVE-2026-119576Summary: ArcadeDB from 21.12.1 before 26.10.2 contains an authorization bypass vulnerabil…5.3medium30 Oct 2026

CVE-2026-119575Summary: ArcadeDB from 26.8.1 before 26.10.2 contains a server-side request forgery vulne…7.1high30 Oct 2026

CVE-2026-119572Summary: Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerab…7.0high30 Oct 2026

CVE-2026-119571Summary: Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw th…6.3medium30 Oct 2026

CVE-2026-119528GIMP. The PSD7.8high30 Oct 2026

CVE-2026-112348Kirki – Freeform Page Builder, Website Builder & Customizer<= 6.2.46.9medium30 Oct 2026

CVE-2026-100355Summary: Campfire is a web-based chat application. In version 1.4.4 and earlier, when a C…3.1low30 Oct 2026

CVE-2026-64860Summary: ESP-Protocols is a collection of protocol components for ESP-IDF. Prior to mDNS…6.5medium30 Oct 2026

CVE-2026-112374Summary: FOSSBilling before 0.8.9 contains a Cross-Site Request Forgery vulnerability in…5.1medium30 Oct 2026

CVE-2026-119591Sqlite6.8medium30 Oct 2026

CVE-2026-119567Summary: vsftpd through 3.0.5 contains an access control bypass vulnerability that allows…2.3low30 Oct 2026