Browse All CVEs
50,445 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-17062 |
low | 2.7 | 0.0038 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-17049 |
critical | 9.9 | 0.0051 | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to o | |
CVE-2026-16920 |
critical | 9.9 | 0.0050 | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to b | |
CVE-2026-16918 |
critical | 9.3 | 0.0042 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-16912 |
high | 8.5 | 0.0037 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-16884 |
critical | 9.9 | 0.0050 | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitiv | |
CVE-2026-16880 |
high | 8.5 | 0.0060 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-16854 |
high | 7.7 | 0.0047 | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to o | |
CVE-2026-16720 |
critical | 9.8 | 0.0077 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-16719 |
medium | 6.5 | 0.0060 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-16718 |
high | 7.7 | 0.0070 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-16717 |
high | 7.7 | 0.0042 | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to o | |
CVE-2026-16716 |
high | 8.8 | 0.0053 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-16715 |
high | 7.7 | 0.0044 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-16714 |
high | 7.5 | 0.0052 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-16712 |
high | 7.7 | 0.0044 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-16711 |
medium | 5.3 | 0.0037 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-16710 |
medium | 5.8 | 0.0037 | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to o | |
CVE-2026-16709 |
high | 8.7 | 0.0045 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a rem | |
CVE-2026-16679 |
medium | 4.3 | 0.0046 | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to view arbitrary | |
CVE-2026-108178 |
medium | 4.2 | 0.0023 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a tok | |
CVE-2026-105459 |
medium | 6.8 | 0.0021 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an at | |
CVE-2026-105002 |
high | 7.5 | 0.0035 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow arbit | |
CVE-2026-19124 |
medium | 6.8 | 0.0032 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 could allow an attacker with access to stored d | |
CVE-2026-17393 |
medium | 5.1 | 0.0013 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 could allow a local attacker to obtain sensitiv | |
CVE-2026-17386 |
high | 8.1 | 0.0048 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 could allow a remote attacker to gain full admi | |
CVE-2026-17384 |
high | 8.5 | 0.0036 | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 could allow a remote authenticated attacker to | |
CVE-2026-19803 |
critical | 9.8 | 0.0096 | 2026-11-07 | The Printcart Store – Web to Print Product Designer for WooCommerce plugin for WordPress i | |
CVE-2026-121516 |
medium | 6.1 | 0.0028 | 2026-11-07 | The QODE Wishlist for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site | |
CVE-2026-120739 |
high | 7.2 | 0.0034 | 2026-11-07 | The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimizatio | |
CVE-2026-120677 |
high | 7.2 | 0.0030 | 2026-11-07 | The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimizatio | |
CVE-2026-120560 |
medium | 6.5 | 0.0041 | 2026-11-07 | The Active Woot Products Tables for WooCommerce. 100% FREE plugin for WordPress is vulnera | |
CVE-2026-119158 |
high | 7.2 | 0.0030 | 2026-11-07 | The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress | |
CVE-2026-123218 |
critical | 9.8 | 0.0053 | 2026-11-07 | KEV | IBM Aspera Faspex contains an incorrect authorization vulnerability that could allow an au |
CVE-2026-17362 |
critical | 9.8 | 0.0058 | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to create, modify, | |
CVE-2026-93754 |
critical | 9.8 | 0.0087 | 2026-11-07 | The payever – WooCommerce Gateway plugin for WordPress is vulnerable to arbitrary file upl | |
CVE-2026-121519 |
medium | 6.4 | 0.0022 | 2026-11-07 | The Social Slider Feed – Social Media Feed & Gallery Widgets plugin for WordPress is vulne | |
CVE-2026-121515 |
medium | 5.4 | 0.0022 | 2026-11-07 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scr | |
CVE-2026-120741 |
medium | 5.4 | 0.0027 | 2026-11-07 | The MotoPress Appointment Booking Lite plugin for WordPress is vulnerable to Stored Cross- | |
CVE-2026-120737 |
medium | 5.9 | 0.0030 | 2026-11-07 | The Jupiter X Core plugin for WordPress is vulnerable to authorization bypass in all versi | |
CVE-2026-120555 |
medium | 5.3 | 0.0044 | 2026-11-07 | The Jupiter X Core plugin for WordPress is vulnerable to Directory Traversal in all versio | |
CVE-2026-120540 |
high | 7.2 | 0.0025 | 2026-11-07 | The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more plugin for WordP | |
CVE-2026-120520 |
medium | 5.3 | 0.0026 | 2026-11-07 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to S | |
CVE-2026-120512 |
high | 7.2 | 0.0024 | 2026-11-07 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for Word | |
CVE-2026-120082 |
high | 7.2 | 0.0025 | 2026-11-07 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin f | |
CVE-2026-119616 |
medium | 5.9 | 0.0041 | 2026-11-07 | The Noptin – Newsletter, New Post Notifications & Email Automation plugin for WordPress is | |
CVE-2026-119219 |
medium | 5.4 | 0.0025 | 2026-11-07 | The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t | |
CVE-2026-119218 |
medium | 5.4 | 0.0022 | 2026-11-07 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to S | |
CVE-2026-119213 |
low | 3.7 | 0.0022 | 2026-11-07 | The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vul | |
CVE-2026-119175 |
high | 7.2 | 0.0031 | 2026-11-07 | The Flying Images: Optimize and Lazy Load Images for Faster Page Speed plugin for WordPres |