Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-18778 |
medium | 5.3 | 0.0034 | 2026-11-09 | The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in | |
CVE-2026-18777 |
medium | 5.3 | 0.0030 | 2026-11-09 | The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in | |
CVE-2026-18776 |
critical | 9.8 | 0.0050 | 2026-11-09 | The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in | |
CVE-2026-18466 |
medium | 5.4 | 0.0029 | 2026-11-09 | The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor valida | |
CVE-2026-18231 |
medium | 5.3 | 0.0034 | 2026-11-09 | The WP Directory Kit WordPress plugin before 1.5.7 does not perform any authorization chec | |
CVE-2026-18051 |
critical | 10.0 | 0.0201 | 2026-11-09 | The W3 Total Cache WordPress plugin before 2.10.5 does not properly validate the request p | |
CVE-2026-18031 |
critical | 9.8 | 0.0050 | 2026-11-09 | The TabaPay Gateway WordPress plugin through 1.4.0 does not validate the payment callback | |
CVE-2026-17565 |
high | 7.2 | 0.0027 | 2026-11-09 | The Animation Addons for Elementor WordPress plugin before 2.7.2 does not validate a user | |
CVE-2026-16979 |
medium | 4.3 | 0.0027 | 2026-11-09 | The SmartCrawl SEO checker, analyzer & optimizer WordPress plugin before 3.16.3 does not p | |
CVE-2026-16950 |
high | 8.6 | 0.0044 | 2026-11-09 | The Product Shortlist WordPress plugin through 1.0.4 does not properly sanitise and escape | |
CVE-2026-70408 |
high | 8.7 | 0.0044 | 2026-11-09 | An incorrect authorization vulnerability exists in acmailer, which may allow a user to cre | |
CVE-2026-66358 |
medium | 5.1 | 0.0026 | 2026-11-09 | A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to ex | |
CVE-2026-76014 |
low | 1.9 | 0.0012 | 2026-11-09 | A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown | |
CVE-2026-73974 |
medium | 5.5 | 0.0017 | 2026-11-09 | linuxfabrik-lib provides Python modules for database access, caching, shell execution, and | |
CVE-2026-48796 |
medium | 5.3 | 0.0040 | 2026-11-09 | CefSharp provides .NET bindings for the Chromium Embedded Framework for Windows Forms and | |
CVE-2026-21580 |
critical | 9.3 | 0.0051 | 2026-11-09 | This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfigu | |
CVE-2026-70709 |
medium | 4.8 | 0.0022 | 2026-11-09 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Cha | |
CVE-2026-70708 |
high | 8.1 | 0.0036 | 2026-11-09 | Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component | |
CVE-2026-62988 |
critical | 9.0 | 0.0063 | 2026-11-09 | Froxlor is open source server administration software. From 2.3.7 until 2.3.8, the Custome | |
CVE-2026-55593 |
medium | 6.5 | 0.0026 | 2026-11-09 | Froxlor is open source server administration software. Prior to 2.3.8, the standalone lib/ | |
CVE-2026-54543 |
medium | 5.4 | 0.0045 | 2026-11-09 | Froxlor is open source server administration software. Prior to 2.3.8, the DomainZones.add | |
CVE-2026-54348 |
high | 7.2 | 0.0066 | 2026-11-09 | Froxlor is open source server administration software. Prior to 2.3.8, the Admins.add and | |
CVE-2026-54347 |
high | 8.7 | 0.0042 | 2026-11-09 | Froxlor is open source server administration software. Prior to 2.3.8, DNS TXT record cont | |
CVE-2026-52793 |
high | 8.1 | 0.0032 | 2026-11-09 | Froxlor is open source server administration software. Prior to 2.3.7, the API authenticat | |
CVE-2026-71676 |
high | 7.5 | 0.0045 | 2026-11-09 | Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denia | |
CVE-2026-57826 |
medium | 6.8 | 0.0027 | 2026-11-09 | An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain v | |
CVE-2026-52739 |
medium | 5.9 | 0.0052 | 2026-11-09 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a malicious block producer | |
CVE-2026-52738 |
medium | 6.9 | 0.0051 | 2026-11-09 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a consensus-valid block co | |
CVE-2026-52737 |
medium | 5.3 | 0.0026 | 2026-11-09 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a malicious unauthenticate | |
CVE-2026-52733 |
medium | 6.5 | 0.0044 | 2026-11-09 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a natural or attacker-infl | |
CVE-2026-52731 |
medium | 6.5 | 0.0053 | 2026-11-09 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an attacker authenticated | |
CVE-2026-47720 |
medium | 5.3 | 0.0064 | 2026-11-09 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.2, | |
CVE-2025-67503 |
— | — | — | 2026-11-09 | Rejected reason: This CVE is a duplicate of another CVE. | |
CVE-2025-67498 |
— | — | — | 2026-11-09 | Rejected reason: Further research determined the issue is not a vulnerability. | |
CVE-2025-67497 |
— | — | — | 2026-11-09 | Rejected reason: Further research determined the issue is not a vulnerability. | |
CVE-2025-66649 |
— | — | — | 2026-11-09 | Rejected reason: Further research determined the issue is not a vulnerability. | |
CVE-2025-65793 |
— | — | — | 2026-11-09 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was wit | |
CVE-2025-34351 |
— | — | — | 2026-11-09 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2025-13511 |
— | — | — | 2026-11-09 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was | |
CVE-2025-13598 |
— | — | — | 2026-11-09 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was | |
CVE-2025-13541 |
— | — | — | 2026-11-09 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was | |
CVE-2025-63700 |
— | — | — | 2026-11-09 | 1 PoC | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was wit |
CVE-2025-63994 |
— | — | — | 2026-11-09 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2018-9206. Reason: This recor | |
CVE-2025-8768 |
— | — | — | 2026-11-09 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-12020 | |
CVE-2025-12858 |
— | — | — | 2026-11-09 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was | |
CVE-2025-59396 |
— | — | — | 2026-11-09 | 1 PoC | Rejected reason: Not a security vulnerability |
CVE-2025-45959 |
— | — | — | 2026-11-09 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was wit | |
CVE-2025-34269 |
— | — | — | 2026-11-09 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2025-34249 |
— | — | — | 2026-11-09 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2025-35980 |
— | — | — | 2026-11-09 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: |