Vulnerability database

8,695 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-95724Summary: An improper certificate validation vulnerability exists in HPE Networking Virtua…8.1high03 Nov 2026

CVE-2026-95723Summary: A missing integrity verification vulnerability has been discovered in the Virtua…8.4high03 Nov 2026

CVE-2026-95722Summary: A local privilege escalation vulnerability has been discovered in the Virtual In…8.8high03 Nov 2026

CVE-2026-93325Summary: Buildx bake requires the user to grant entitlements with --allow or an interacti…7.3high03 Nov 2026

CVE-2026-63478Summary: isomorphic-git is a pure JavaScript implementation of Git for Node.js and browse…5.3medium03 Nov 2026

CVE-2026-63476Summary: isomorphic-git is a pure JavaScript implementation of Git for Node.js and browse…4.3medium03 Nov 2026

CVE-2026-63471Summary: fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to…9.3critical03 Nov 2026

CVE-2026-63433Summary: MyTube is a self-hosted downloader and player for several video websites. Prior…6.8medium03 Nov 2026

CVE-2026-121577Summary: Inefficient Regular Expression Complexity (CWE-1333) in generate_regex() (whatst…6.7medium03 Nov 2026

CVE-2026-120567Summary: The MongoDB Entity Framework Core provider does not neutralize special elements…2.3low03 Nov 2026

CVE-2026-105822Summary: The Tapo Cloud MQTT proxy contains a server-side request forgery (SSRF) vulnerab…8.3high03 Nov 2026

CVE-2026-105821Summary: The Tapo Cloud MQTT broker contains a broken access control vulnerability in a p…8.3high03 Nov 2026

CVE-2025-71451Summary: Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vul…5.1medium03 Nov 2026

CVE-2026-57154Summary: OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11 and…8.1high03 Nov 2026

CVE-2026-46487Summary: GeoNetwork is a catalog application to manage spatially referenced resources. Fr…7.5high03 Nov 2026

CVE-2026-121652Summary: Cross-site scripting (XSS) issue in AWS Amplify maplibre-gl-js-amplify before 4.…4.8medium03 Nov 2026

CVE-2026-121501Summary: A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project. The a…2.1low03 Nov 2026

CVE-2026-119922Summary: Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1…8.7high03 Nov 2026

CVE-2026-112917Summary: In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux conta…9.2critical03 Nov 2026

CVE-2026-44267Summary: Elo is a purely functional expression language for no-code tools. Prior to 1.0.1…PoC ×19.8critical03 Nov 2026

CVE-2026-121626Summary: GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vulnerability…6.3medium03 Nov 2026

CVE-2026-39777WCFM Membership – WooCommerce Memberships for Multivendor Marketplace<= 2.12.04.3medium03 Nov 2026

CVE-2026-39743WCFM Membership – WooCommerce Memberships for Multivendor Marketplace<= 2.12.05.3medium03 Nov 2026

CVE-2026-38595Summary: An issue in im3x Scriptables through v2-dev branch allows attackers to inject ar…9.8critical03 Nov 2026

CVE-2026-121604Summary: wlroots before 0.20.2 contains an out-of-bounds read vulnerability in read_surfa…4.8medium03 Nov 2026