Vulnerability database

8,666 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-120637Summary: CGI versions before 5.00 for Perl take request parameters from the process comma…—unscored04 Nov 2026

CVE-2026-120636Summary: CGI versions before 5.00 for Perl allow open redirects and script injection via…—unscored04 Nov 2026

CVE-2026-120635Summary: CGI versions before 5.00 for Perl allow form fields to be smuggled past proxies…—unscored04 Nov 2026

CVE-2026-120634Summary: CGI::Carp versions before 5.00 for Perl leak warnings across requests in persist…—unscored04 Nov 2026

CVE-2026-120633Summary: CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in ur…—unscored04 Nov 2026

CVE-2026-120632Summary: CGI versions before 5.00 for Perl allow CPU exhaustion via a backtracking regex…—unscored04 Nov 2026

CVE-2026-120631Summary: CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via…—unscored04 Nov 2026

CVE-2026-118628Summary: MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerab…8.2high04 Nov 2026

CVE-2026-118627Summary: MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Executi…7.8high04 Nov 2026

CVE-2026-118626Summary: MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnera…5.4medium04 Nov 2026

CVE-2026-118625Summary: MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability.…6.3medium04 Nov 2026

CVE-2026-118624Summary: MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnera…5.4medium04 Nov 2026

CVE-2026-118623Summary: MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Ex…7.8high04 Nov 2026

CVE-2026-114552Summary: MailEnable parseObjectResponse XML External Entity Processing Information Disclo…6.5medium04 Nov 2026

CVE-2026-114551Summary: MailEnable Auth Cleartext Storage Information Disclosure Vulnerability. This vul…5.9medium04 Nov 2026

CVE-2026-114550Summary: libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Co…8.1high04 Nov 2026

CVE-2026-114549Summary: NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerabi…9.8critical04 Nov 2026

CVE-2026-121734Summary: ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that…6.0medium03 Nov 2026

CVE-2026-121733Summary: Bagisto before 2.4.5 contains a stored cross-site scripting vulnerability that a…2.1low03 Nov 2026

CVE-2026-121730Summary: emailflare before commit cf31f33 contains a missing authorization vulnerability…7.1high03 Nov 2026

CVE-2026-121729Summary: emailflare before commit cf31f33 contains a missing authorization vulnerability…7.2high03 Nov 2026

CVE-2026-121565Summary: Tanium addressed an improper certificate validation vulnerability in multiple pr…7.4high03 Nov 2026

CVE-2026-121539Summary: A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. A…5.3medium03 Nov 2026

CVE-2026-121535Summary: A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87. This vul…2.9low03 Nov 2026

CVE-2026-121520Summary: In BuildKit versions prior to v0.34.1, a malicious client with access to the Bui…4.5medium03 Nov 2026