Browse All CVEs
39,766 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-120578 |
medium | 5.3 | 0.0026 | 2026-11-03 | The AI Alt Text Generator plugin for WordPress is vulnerable to authorization bypass in al | |
CVE-2026-120574 |
high | 8.1 | 0.0033 | 2026-11-03 | The SureCart plugin for WordPress is vulnerable to unauthenticated account takeover in all | |
CVE-2026-120575 |
medium | 6.4 | 0.0021 | 2026-11-03 | The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to Store | |
CVE-2026-120561 |
medium | 5.3 | 0.0025 | 2026-11-03 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to una | |
CVE-2026-120563 |
medium | 4.9 | 0.0030 | 2026-11-03 | The WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress is vulnerable | |
CVE-2026-120558 |
high | 7.2 | 0.0035 | 2026-11-03 | The Advanced Shipment Tracking for WooCommerce plugin for WordPress is vulnerable to SQL I | |
CVE-2026-120559 |
high | 7.5 | 0.0067 | 2026-11-03 | The Contact Form Extender for Divi Builder plugin for WordPress is vulnerable to Arbitrary | |
CVE-2026-120551 |
medium | 5.3 | 0.0025 | 2026-11-03 | The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnera | |
CVE-2026-120552 |
medium | 6.4 | 0.0020 | 2026-11-03 | The SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress plugin for WordPres | |
CVE-2026-120538 |
high | 8.1 | 0.0043 | 2026-11-03 | The Easy Digital Downloads plugin for WordPress is vulnerable to authentication bypass lea | |
CVE-2026-120544 |
medium | 4.3 | 0.0034 | 2026-11-03 | The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPres | |
CVE-2026-120524 |
medium | 6.4 | 0.0019 | 2026-11-03 | The News Kit Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site | |
CVE-2026-120534 |
critical | 9.8 | 0.0031 | 2026-11-03 | The Advanced Custom Fields: Extended PRO plugin for WordPress is vulnerable to Limited Cod | |
CVE-2026-120518 |
critical | 9.1 | 0.0078 | 2026-11-03 | The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file d | |
CVE-2026-3633 |
low | 3.9 | 0.0024 | 2026-11-03 | A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the | |
CVE-2026-95508 |
high | 7.4 | 0.0057 | 2026-11-03 | A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslir | |
CVE-2026-120971 |
medium | 5.3 | 0.0034 | 2026-11-03 | A flaw was found in RESTEasy's default exception mapper. When an unhandled exception other | |
CVE-2026-111464 |
medium | 5.9 | 0.0042 | 2026-11-03 | The WP Fastest Cache plugin for WordPress is vulnerable to Sensitive Information Exposure | |
CVE-2026-103399 |
medium | 5.3 | 0.0025 | 2026-11-03 | A flaw was found in SoupServer (libsoup). When an HTTP/1.x client sends a request with Exp | |
CVE-2026-3634 |
medium | 6.5 | 0.0019 | 2026-11-03 | A flaw was found in libsoup. An attacker controlling the value used to set the Content-Typ | |
CVE-2026-6324 |
medium | 4.8 | 0.0087 | 2026-11-03 | A flaw was found in libsoup. A remote attacker could exploit an unsigned to signed convers | |
CVE-2026-107441 |
high | 8.8 | 0.0029 | 2026-11-03 | An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versi | |
CVE-2026-120831 |
medium | 6.5 | 0.0027 | 2026-11-03 | A flaw was found in libslirp in if_output(). When moving a session from the fast queue to | |
CVE-2026-76955 |
high | 8.8 | 0.0025 | 2026-11-03 | A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions | |
CVE-2026-105770 |
medium | 5.3 | 0.0026 | 2026-11-03 | Octo STS (github.com/octo-sts/app) before 0.11.2 returns trust policy configuration to cal | |
CVE-2026-120833 |
high | 8.5 | 0.0014 | 2026-11-03 | labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read( | |
CVE-2026-120830 |
high | 7.4 | 0.0022 | 2026-11-03 | A flaw was found in libslirp in icmp_forward_error(). When building an ICMP error response | |
CVE-2026-109832 |
high | 7.5 | 0.0041 | 2026-11-03 | A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VN | |
CVE-2026-40895 |
medium | 6.9 | 0.0049 | 2026-11-02 | follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modu | |
CVE-2026-40176 |
high | 7.8 | 0.0104 | 2026-11-02 | 3 PoC | Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9. |
CVE-2023-32558 |
high | 7.5 | 0.0174 | 2026-11-02 | The use of the deprecated API `process.binding()` can bypass the permission model through | |
CVE-2023-29074 |
critical | 9.8 | 0.0112 | 2026-11-02 | A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can | |
CVE-2023-30588 |
medium | 5.3 | 0.0116 | 2026-11-02 | When an invalid public key is used to create an x509 certificate using the crypto.X509Cert | |
CVE-2023-29007 |
high | 7.8 | 0.0561 | 2026-11-02 | 2 PoC | Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8 |
CVE-2023-29073 |
critical | 9.8 | 0.0113 | 2026-11-02 | A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be | |
CVE-2023-25815 |
low | 2.2 | 0.0084 | 2026-11-02 | In Git for Windows, the Windows port of Git, no localized messages are shipped with the in | |
CVE-2023-22329 |
low | 3.5 | 0.0030 | 2026-11-02 | Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an a | |
CVE-2023-23384 |
high | 7.3 | 0.0087 | 2026-11-02 | Microsoft SQL Server Remote Code Execution Vulnerability | |
CVE-2023-4693 |
medium | 4.6 | 0.0049 | 2026-11-02 | An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may all | |
CVE-2026-120597 |
low | 2.1 | 0.0028 | 2026-11-02 | A vulnerability was identified in Welcart e-Commerce Plugin up to 2.12.6 on WordPress. Thi | |
CVE-2023-21713 |
high | 8.8 | 0.0177 | 2026-11-02 | Microsoft SQL Server Remote Code Execution Vulnerability | |
CVE-2023-4194 |
medium | 5.5 | 0.0027 | 2026-11-02 | A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a loc | |
CVE-2023-46751 |
high | 7.5 | 0.0153 | 2026-11-02 | An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghosts | |
CVE-2023-49646 |
medium | 6.5 | 0.0040 | 2026-11-02 | Improper authentication in some Zoom clients before version 5.16.5 may allow an authentica | |
CVE-2023-41140 |
high | 7.8 | 0.0027 | 2026-11-02 | A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be u | |
CVE-2023-45862 |
medium | 5.5 | 0.0028 | 2026-11-02 | An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driv | |
CVE-2023-36049 |
critical | 9.8 | 0.0679 | 2026-11-02 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | |
CVE-2023-39214 |
high | 8.1 | 0.0096 | 2026-11-02 | Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenti | |
CVE-2023-35947 |
high | 8.1 | 0.0053 | 2026-11-02 | Gradle is a build tool with a focus on build automation and support for multi-language dev | |
CVE-2023-36009 |
medium | 5.5 | 0.0123 | 2026-11-02 | Microsoft Word Information Disclosure Vulnerability |