Vulnerability database

8,871 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-121446Summary: svg-sanitizer from 0.5.0 before 1.1.0 contains an incomplete filtering vulnerabi…5.3medium03 Nov 2026

CVE-2026-121442Summary: Frappe HRMS before 15.61.0 contains a permission bypass vulnerability that allow…5.3medium03 Nov 2026

CVE-2026-121438Summary: Mistune before 3.3.3 contains a denial of service vulnerability in InlineParser.…6.9medium03 Nov 2026

CVE-2026-121434Summary: Froxlor 2.3.0 before 2.3.15 contains a missing authorization check in the Certif…5.3medium03 Nov 2026

CVE-2026-121430Summary: AzuraCast before 0.24.0 contains a missing authorization vulnerability in the GE…5.3medium03 Nov 2026

CVE-2026-121426Summary: Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in…8.3high03 Nov 2026

CVE-2026-121422Summary: SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnera…5.1medium03 Nov 2026

CVE-2026-121418Summary: SurrealDB from 3.1.0 before 3.3.0 contains an incorrect authorization vulnerabil…5.3medium03 Nov 2026

CVE-2026-121414Summary: Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 fails to contain a s…8.2high03 Nov 2026

CVE-2026-121410Freerdp5.3medium03 Nov 2026

CVE-2026-121406Freerdp5.3medium03 Nov 2026

CVE-2026-121402Freerdp7.1high03 Nov 2026

CVE-2026-121398Freerdp8.2high03 Nov 2026

CVE-2026-121394Freerdp7.1high03 Nov 2026

CVE-2026-121390Freerdp5.3medium03 Nov 2026

CVE-2026-121386Freerdp8.7high03 Nov 2026

CVE-2026-106991Summary: hustoj >=24.09.10 and <=26.08.19 is vulnerable to Incorrect Access Control. Any…7.1high03 Nov 2026

CVE-2026-89295Summary: In Eclipse Mnestix AAS Generator versions 0.1.0 up until but excluding 1.5.0, a…7.5high03 Nov 2026

CVE-2026-99270Summary: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix po…8.1high03 Nov 2026

CVE-2026-76124BuddyBoss App<= 3.2.18.8high03 Nov 2026

CVE-2026-99255Summary: In the Linux kernel, the following vulnerability has been resolved: io_uring/io…—unscored03 Nov 2026

CVE-2026-99254Summary: In the Linux kernel, the following vulnerability has been resolved: io_uring: d…—unscored03 Nov 2026

CVE-2026-99253Summary: In the Linux kernel, the following vulnerability has been resolved: io_uring/ca…—unscored03 Nov 2026

CVE-2026-114442Summary: Apache HertzBeat versions 1.7.1, 1.7.2, 1.7.3, 1.8.0, and 1.9.0 have incomplete…6.5medium03 Nov 2026

CVE-2026-119724Summary: ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity referen…7.5high03 Nov 2026