Browse All CVEs
50,426 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-120984 |
critical | 9.1 | 0.0042 | 2026-11-07 | A flaw was found in the Keycloak server's client management component. When a client is cr | |
CVE-2026-123963 |
medium | 5.5 | 0.0063 | 2026-11-07 | A security vulnerability has been detected in OpenBMB Internet of Agents up to 9d78e88e471 | |
CVE-2026-123477 |
medium | 6.5 | 0.0017 | 2026-11-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-123462 |
medium | 5.3 | 0.0026 | 2026-11-07 | Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly | |
CVE-2026-122669 |
medium | 6.5 | 0.0017 | 2026-11-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-122663 |
medium | 5.3 | 0.0023 | 2026-11-07 | Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiti | |
CVE-2026-121784 |
medium | 6.5 | 0.0017 | 2026-11-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-121775 |
medium | 5.3 | 0.0023 | 2026-11-07 | Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiti | |
CVE-2026-123474 |
medium | 5.3 | 0.0027 | 2026-11-07 | Missing Authorization vulnerability in LeapWorx Premium Blocks – Gutenberg Blocks for Word | |
CVE-2026-123183 |
medium | 5.3 | 0.0027 | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-123483 |
medium | 5.3 | 0.0019 | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-123467 |
medium | 4.3 | 0.0020 | 2026-11-07 | Missing Authorization vulnerability in StylemixThemes Motors motors-car-dealership-classif | |
CVE-2026-122660 |
medium | 4.3 | 0.0020 | 2026-11-07 | Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-co | |
CVE-2026-122659 |
medium | 5.4 | 0.0018 | 2026-11-07 | Missing Authorization vulnerability in WP ManageNinja LLC Fluent Booking fluent-booking al | |
CVE-2026-121579 |
medium | 6.5 | 0.0017 | 2026-11-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-121575 |
medium | 5.3 | 0.0026 | 2026-11-07 | Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager all | |
CVE-2026-121777 |
medium | 5.3 | 0.0027 | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-123964 |
low | 2.1 | 0.0045 | 2026-11-07 | A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee853 | |
CVE-2026-123861 |
medium | 5.3 | 0.0026 | 2026-11-07 | Authorization Bypass Through User-Controlled Key vulnerability in CrocoBlock JetFormBuilde | |
CVE-2026-120841 |
high | 8.8 | 0.0041 | 2026-11-07 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-120839 |
high | 8.8 | 0.0041 | 2026-11-07 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-123860 |
medium | 5.3 | 0.0027 | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-122041 |
critical | 9.1 | 0.0048 | 2026-11-07 | The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unau | |
CVE-2026-120579 |
medium | 6.4 | 0.0025 | 2026-11-07 | The Active Woot Products Tables for WooCommerce. 100% FREE plugin for WordPress is vulnera | |
CVE-2026-119156 |
high | 7.2 | 0.0042 | 2026-11-07 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via | |
CVE-2026-109973 |
medium | 6.4 | 0.0025 | 2026-11-07 | The Image Hover Effects Ultimate Visual Composer (Flipbox - Awesomes Flip Boxes Image Over | |
CVE-2026-121765 |
high | 7.1 | 0.0023 | 2026-11-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-119498 |
medium | 5.3 | 0.0035 | 2026-11-07 | Authentication Bypass Using an Alternate Path or Channel vulnerability in RelyWP Simple Cl | |
CVE-2024-6126 |
low | 3.2 | 0.0027 | 2026-11-07 | A flaw was found in the cockpit package. This flaw allows an authenticated user to kill an | |
CVE-2024-5971 |
high | 7.5 | 0.0292 | 2026-11-07 | A vulnerability was found in Undertow, where the chunked response hangs after the body was | |
CVE-2024-5953 |
medium | 5.7 | 0.0058 | 2026-11-07 | A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may | |
CVE-2023-4910 |
medium | 5.5 | 0.0022 | 2026-11-07 | A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page | |
CVE-2023-4806 |
medium | 5.9 | 0.0161 | 2026-11-07 | A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo funct | |
CVE-2023-4727 |
high | 7.5 | 0.0066 | 2026-11-07 | A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypass | |
CVE-2023-4692 |
high | 7.8 | 0.0054 | 2026-11-07 | An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may al | |
CVE-2023-4459 |
medium | 5.5 | 0.0025 | 2026-11-07 | A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmx | |
CVE-2023-4273 |
medium | 6.0 | 0.0065 | 2026-11-07 | A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the | |
CVE-2023-4133 |
medium | 5.5 | 0.0023 | 2026-11-07 | A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug | |
CVE-2023-4132 |
medium | 5.5 | 0.0025 | 2026-11-07 | A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. T | |
CVE-2023-4042 |
medium | 5.5 | 0.0034 | 2026-11-07 | A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not include | |
CVE-2023-4004 |
high | 7.8 | 0.0092 | 2026-11-07 | A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers | |
CVE-2023-4001 |
medium | 6.8 | 0.0054 | 2026-11-07 | An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of | |
CVE-2023-43789 |
medium | 5.5 | 0.0036 | 2026-11-07 | A vulnerability was found in libXpm where a vulnerability exists due to a boundary conditi | |
CVE-2023-43787 |
high | 7.8 | 0.0047 | 2026-11-07 | A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() f | |
CVE-2023-43786 |
medium | 5.5 | 0.0047 | 2026-11-07 | 1 PoC | A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() funct |
CVE-2023-43785 |
medium | 5.5 | 0.0067 | 2026-11-07 | A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms | |
CVE-2023-42754 |
medium | 5.5 | 0.0043 | 2026-11-07 | A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffe | |
CVE-2023-42753 |
high | 7.0 | 0.0051 | 2026-11-07 | An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. | |
CVE-2023-42670 |
medium | 6.5 | 0.0132 | 2026-11-07 | A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatibl | |
CVE-2023-42669 |
medium | 6.5 | 0.0194 | 2026-11-07 | A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC serve |