Browse All CVEs
50,444 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-118528 |
medium | 4.3 | 0.0020 | 2026-11-07 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin | |
CVE-2026-117588 |
medium | 4.3 | 0.0011 | 2026-11-07 | The WP Google Review Slider WordPress plugin before 18.11 does not perform nonce validatio | |
CVE-2026-117525 |
high | 7.5 | 0.0025 | 2026-11-07 | The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not escape shortco | |
CVE-2025-15708 |
low | 3.5 | 0.0017 | 2026-11-07 | The Live Composer WordPress plugin before 2.1.23 does not sanitise and escape some of its | |
CVE-2026-18535 |
critical | 9.6 | 0.0029 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to | |
CVE-2023-39328 |
medium | 5.5 | 0.0024 | 2026-11-07 | A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attack | |
CVE-2023-39198 |
high | 7.5 | 0.0041 | 2026-11-07 | A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create | |
CVE-2023-4535 |
medium | 4.5 | 0.0049 | 2026-11-07 | An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver w | |
CVE-2023-43788 |
medium | 5.5 | 0.0038 | 2026-11-07 | A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmIma | |
CVE-2023-42755 |
medium | 6.5 | 0.0040 | 2026-11-07 | A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux | |
CVE-2023-3347 |
medium | 5.9 | 0.0044 | 2026-11-07 | A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signin | |
CVE-2023-3106 |
medium | 6.6 | 0.0029 | 2026-11-07 | A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur w | |
CVE-2026-9601 |
medium | 6.4 | 0.0031 | 2026-11-07 | The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored | |
CVE-2026-93902 |
medium | 6.4 | 0.0019 | 2026-11-07 | The Soledad theme for WordPress is vulnerable to Stored Cross-Site Scripting via Social Pr | |
CVE-2026-93779 |
medium | 6.5 | 0.0041 | 2026-11-07 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to | |
CVE-2026-120477 |
medium | 4.7 | 0.0025 | 2026-11-07 | The Stop Spammers Classic plugin for WordPress is vulnerable to Stored Cross-Site Scriptin | |
CVE-2026-120043 |
high | 7.5 | 0.0040 | 2026-11-07 | The Affiliate Program Suite — SliceWP Affiliates plugin for WordPress is vulnerable to gen | |
CVE-2026-119167 |
high | 7.2 | 0.0031 | 2026-11-07 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress | |
CVE-2026-110705 |
medium | 5.3 | 0.0034 | 2026-11-07 | The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all vers | |
CVE-2026-110534 |
medium | 6.4 | 0.0026 | 2026-11-07 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via | |
CVE-2026-75590 |
high | 7.2 | 0.0035 | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to access internal | |
CVE-2026-19131 |
medium | 6.5 | 0.0034 | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow low-privileged users to query arbitr | |
CVE-2026-19129 |
medium | 6.8 | 0.0024 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a net | |
CVE-2026-19128 |
high | 7.5 | 0.0039 | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to send un | |
CVE-2026-19126 |
medium | 5.9 | 0.0023 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 uses weaker than | |
CVE-2026-19122 |
low | 3.8 | 0.0026 | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated privileged attacker | |
CVE-2026-19121 |
high | 8.3 | 0.0037 | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to gain un | |
CVE-2026-18838 |
critical | 9.4 | 0.0067 | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitiv | |
CVE-2026-18836 |
critical | 9.3 | 0.0041 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-18689 |
medium | 4.3 | 0.0028 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an au | |
CVE-2026-17428 |
medium | 5.0 | 0.0034 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17411 |
high | 7.6 | 0.0032 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an au | |
CVE-2026-17410 |
critical | 9.9 | 0.0066 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17409 |
critical | 9.4 | 0.0055 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17408 |
critical | 9.8 | 0.0093 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17407 |
high | 8.5 | 0.0046 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17406 |
high | 8.5 | 0.0040 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17405 |
high | 8.8 | 0.0054 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17404 |
high | 8.5 | 0.0037 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17403 |
critical | 9.0 | 0.0050 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17402 |
critical | 9.9 | 0.0191 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17401 |
high | 7.2 | 0.0090 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17400 |
high | 7.7 | 0.0047 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17399 |
critical | 9.9 | 0.0079 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17398 |
high | 8.5 | 0.0037 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17397 |
high | 8.5 | 0.0037 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17396 |
critical | 9.6 | 0.0050 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17395 |
medium | 6.4 | 0.0029 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17394 |
critical | 9.6 | 0.0052 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17392 |
critical | 9.9 | 0.0066 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem |