Vulnerability database

8,518 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-92193Summary: Quest Foglight for Databases FileServlet External Control of File Path Informati…EPSS 2.1%6.5medium04 Nov 2026

CVE-2026-92192Summary: Quest Foglight for Databases installLicense Directory Traversal Remote Code Exec…EPSS 1.3%8.8high04 Nov 2026

CVE-2026-92191Summary: Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execu…8.8high04 Nov 2026

CVE-2026-92190Summary: Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted…9.8critical04 Nov 2026

CVE-2026-92189Summary: Quest Foglight for Databases writeTopologySectionToFile External Control of File…9.8critical04 Nov 2026

CVE-2026-92188Summary: Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remo…9.8critical04 Nov 2026

CVE-2026-92187Summary: Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal…EPSS 1.3%8.8high04 Nov 2026

CVE-2026-92186Summary: Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Rem…EPSS 1.3%8.8high04 Nov 2026

CVE-2026-92185Summary: Quest Foglight for Databases AbstractParser XML External Entity Processing Infor…EPSS 1.9%7.2high04 Nov 2026

CVE-2026-121585Summary: A security flaw has been discovered in InfiniFlow RAGFlow up to 0.27.2/1.0.0-rc2…2.1low04 Nov 2026

CVE-2026-121583Sanluan PublicCMS2.1low04 Nov 2026

CVE-2026-120651Summary: CGI versions before 5.00 for Perl allow an infinite loop on a short request body…—unscored04 Nov 2026

CVE-2026-120650Summary: CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via miss…—unscored04 Nov 2026

CVE-2026-120648Summary: CGI versions before 5.00 for Perl allow HTML injection via text containing --> i…—unscored04 Nov 2026

CVE-2026-120647Summary: CGI versions before 5.00 for Perl allow Content-Disposition parameter injection…—unscored04 Nov 2026

CVE-2026-120646Summary: CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain…—unscored04 Nov 2026

CVE-2026-120645Summary: CGI versions before 5.00 for Perl allow denial of service via submitted values u…—unscored04 Nov 2026

CVE-2026-120644Summary: CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via u…—unscored04 Nov 2026

CVE-2026-120643Summary: CGI versions from 4.62 before 5.00 for Perl allow cross-site scripting via a raw…—unscored04 Nov 2026

CVE-2026-120642Summary: CGI versions before 5.00 for Perl return request-derived values untainted under…—unscored04 Nov 2026

CVE-2026-120641Summary: CGI versions before 5.00 for Perl return upload filenames with any client-suppli…—unscored04 Nov 2026

CVE-2026-120640Summary: CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDATA and XFo…—unscored04 Nov 2026

CVE-2026-120639Summary: CGI versions before 5.00 for Perl allow HTTP header injection via entity decodin…—unscored04 Nov 2026

CVE-2026-120638Summary: CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding…—unscored04 Nov 2026

CVE-2026-120637Summary: CGI versions before 5.00 for Perl take request parameters from the process comma…—unscored04 Nov 2026