Browse All CVEs
50,446 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-119175 |
high | 7.2 | 0.0031 | 2026-11-07 | The Flying Images: Optimize and Lazy Load Images for Faster Page Speed plugin for WordPres | |
CVE-2026-119165 |
medium | 6.4 | 0.0018 | 2026-11-07 | The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scriptin | |
CVE-2026-119152 |
medium | 5.4 | 0.0023 | 2026-11-07 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin fo | |
CVE-2026-119098 |
medium | 6.4 | 0.0020 | 2026-11-07 | The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vu | |
CVE-2026-119070 |
high | 7.2 | 0.0026 | 2026-11-07 | The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimizatio | |
CVE-2026-118067 |
medium | 5.4 | 0.0031 | 2026-11-07 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for Word | |
CVE-2026-118054 |
medium | 6.4 | 0.0022 | 2026-11-07 | The LearnPress – Course Review plugin for WordPress is vulnerable to Stored DOM-Based Cros | |
CVE-2026-118046 |
medium | 6.4 | 0.0020 | 2026-11-07 | The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerabl | |
CVE-2026-116562 |
medium | 6.4 | 0.0024 | 2026-11-07 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerabl | |
CVE-2026-115816 |
medium | 6.4 | 0.0020 | 2026-11-07 | The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scriptin | |
CVE-2026-104913 |
high | 8.8 | 0.0052 | 2026-11-07 | The Interactive Real Estate – Floor Plan & Building Visualizer plugin for WordPress is vul | |
CVE-2026-71881 |
medium | 4.8 | 0.0042 | 2026-11-07 | Multiple injection issues in resource metadata fields in GBIF Integrated Publishing Toolki | |
CVE-2026-109469 |
critical | 10.0 | 0.0067 | 2026-11-06 | Authorization bypass through user-controlled key in Entra Device Registration allows an un | |
CVE-2026-27356 |
medium | 5.3 | 0.0025 | 2026-11-06 | Missing Authorization vulnerability in ibericode MC4WP mailchimp-for-wp allows Exploiting | |
CVE-2026-123471 |
medium | 4.3 | 0.0024 | 2026-11-06 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-122670 |
medium | 5.4 | 0.0018 | 2026-11-06 | Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Exploiting Incor | |
CVE-2026-120851 |
medium | 4.3 | 0.0020 | 2026-11-06 | Missing Authorization vulnerability in PublishPress PublishPress Revisions revisionary all | |
CVE-2026-120845 |
medium | 6.5 | 0.0017 | 2026-11-06 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-119519 |
medium | 4.3 | 0.0022 | 2026-11-06 | Missing Authorization vulnerability in WProyal Royal Elementor Addons royal-elementor-addo | |
CVE-2026-118785 |
medium | 6.7 | 0.0016 | 2026-11-06 | Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK | |
CVE-2026-75939 |
high | 7.4 | 0.0038 | 2026-11-06 | A flaw was found in openshift/oc-mirror. The tool incorrectly verifies PGP (Pretty Good Pr | |
CVE-2024-6505 |
medium | 6.8 | 0.0066 | 2026-11-06 | A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the vi | |
CVE-2026-118786 |
medium | 6.8 | 0.0017 | 2026-11-06 | Improper input validation in non-secure-callable (NSC) veneer functions of the NXP MCUXpre | |
CVE-2026-107931 |
— | — | — | 2026-11-06 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-101576 |
low | 3.7 | 0.0021 | 2026-11-06 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Suppor | |
CVE-2026-101574 |
medium | 6.9 | 0.0010 | 2026-11-06 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: OIDC). Suppo | |
CVE-2026-94619 |
medium | 5.9 | 0.0017 | 2026-11-06 | FileGator is a multi-user file manager. Prior to 7.15.0, POST /upload in backend/Controlle | |
CVE-2026-94618 |
medium | 5.4 | 0.0019 | 2026-11-06 | FileGator is a multi-user file manager. Prior to 7.15.0, GET /batchdownload in backend/Con | |
CVE-2026-119800 |
medium | 4.3 | 0.0020 | 2026-11-06 | Ryot is a self-hosted personal tracking application. Prior to 10.5.6, the collectionConten | |
CVE-2026-103022 |
medium | 5.3 | 0.0047 | 2026-11-06 | Urwid is a console user interface library for Python. Prior to 4.0.7, handle_short_request | |
CVE-2026-101571 |
medium | 5.6 | 0.0011 | 2026-11-06 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-secur | |
CVE-2026-59104 |
critical | 9.3 | 0.0066 | 2026-11-06 | UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler | |
CVE-2026-123791 |
medium | 5.5 | 0.0030 | 2026-11-06 | A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee853 | |
CVE-2026-50240 |
high | 8.8 | 0.0044 | 2026-11-06 | A flaw was found in OpenShift Pipelines-as-Code (PAC). PAC does not verify whether the cre | |
CVE-2026-101560 |
high | 7.1 | 0.0026 | 2026-11-06 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynam | |
CVE-2026-101541 |
high | 7.7 | 0.0039 | 2026-11-06 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Intern | |
CVE-2026-101540 |
high | 7.7 | 0.0039 | 2026-11-06 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Intern | |
CVE-2026-68935 |
critical | 9.1 | 0.0055 | 2026-11-06 | Chartbrew is an open-source web application for creating charts from databases and APIs. I | |
CVE-2026-68933 |
high | 7.5 | 0.0019 | 2026-11-06 | Chartbrew is an open-source web application that can connect directly to databases and API | |
CVE-2026-123788 |
medium | 5.3 | 0.0027 | 2026-11-06 | A security vulnerability has been detected in chenyme grok2api up to 3.1.6. The impacted e | |
CVE-2026-101473 |
high | 8.1 | 0.0035 | 2026-11-06 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Orac | |
CVE-2026-69128 |
medium | 4.6 | 0.0036 | 2026-11-06 | Chartbrew is an open-source web application that can connect directly to databases and API | |
CVE-2026-44519 |
medium | 5.1 | 0.0012 | 2026-11-06 | liboqs is a C-language cryptographic library that provides implementations of post-quantum | |
CVE-2026-104254 |
medium | 5.3 | 0.0029 | 2026-11-06 | liboqs is a C-language cryptographic library that provides implementations of post-quantum | |
CVE-2026-101565 |
medium | 6.2 | 0.0016 | 2026-11-06 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Import). | |
CVE-2026-101564 |
medium | 5.9 | 0.0026 | 2026-11-06 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect) | |
CVE-2026-77442 |
medium | 5.9 | 0.0022 | 2026-11-06 | Ryot is a self-hosted personal tracking application. Prior to 10.4.0, the createOrUpdateUs | |
CVE-2026-48057 |
low | 2.1 | 0.0016 | 2026-11-06 | Botan is a C++ cryptography library. Prior to 3.13.0, Botan's X.509 Distinguished Name dec | |
CVE-2026-47738 |
medium | 5.3 | 0.0030 | 2026-11-06 | liboqs is a C-language cryptographic library that provides implementations of post-quantum | |
CVE-2026-104267 |
medium | 4.1 | 0.0011 | 2026-11-06 | Botan is a C++ cryptography library. From 2.7.0 until 3.13.0, Botan's Scrypt implementatio |