Browse All CVEs
50,472 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-121821 |
medium | 5.3 | 0.0032 | 2026-11-06 | A vulnerability has been identified in armeria versions 0.84.0 through 1.42.0, where any-o | |
CVE-2026-121820 |
high | 8.7 | 0.0040 | 2026-11-06 | A vulnerability has been identified in armeria-saml versions prior to 1.43.0, where the HT | |
CVE-2026-121819 |
medium | 5.9 | 0.0032 | 2026-11-06 | A vulnerability has been identified in armeria-xds versions 1.40.0 through 1.42.0, where D | |
CVE-2026-65022 |
medium | 6.3 | 0.0016 | 2026-11-06 | The MDM App Catalog / App Store preview does not properly sanitize or encode user-supplied | |
CVE-2026-121824 |
high | 8.7 | 0.0041 | 2026-11-06 | A vulnerability has been identified in armeria versions prior to 1.43.0, where processing | |
CVE-2026-121823 |
high | 8.7 | 0.0044 | 2026-11-06 | A vulnerability has been identified in armeria versions prior to 1.43.0, where inconsisten | |
CVE-2026-121006 |
high | 7.5 | 0.0042 | 2026-11-06 | HTTP::Body versions before 1.24_02 for Perl parse the trailer in quadratic time. Everythi | |
CVE-2026-40802 |
high | 7.6 | 0.0029 | 2026-11-06 | Missing Authorization vulnerability in pubjet Pubjet | پابجت pubjet allows Exploiting Inc | |
CVE-2026-120749 |
medium | 6.2 | 0.0012 | 2026-11-06 | A flaw was found in D-Bus. With a privileged Monitoring client attached (for example dbus- | |
CVE-2026-19729 |
medium | 4.9 | 0.0056 | 2026-11-06 | A flaw was found in the key provider component of the keycloak-services library, which is | |
CVE-2026-73473 |
medium | 5.5 | 0.0012 | 2026-11-06 | A flaw was found in GStreamer gst-plugins-good (avidemux). In the subindex parser, missing | |
CVE-2026-73472 |
medium | 6.1 | 0.0013 | 2026-11-06 | A flaw was found in GStreamer gst-plugins-good (avidemux). In the superindex and subindex | |
CVE-2026-73471 |
medium | 6.1 | 0.0012 | 2026-11-06 | A flaw was found in GStreamer gst-plugins-good (avidemux). In the Nikon metadata tag parse | |
CVE-2026-93432 |
medium | 6.1 | 0.0118 | 2026-11-06 | A flaw was found in the Quarkus Qute template engine. When the {#eval} section helper proc | |
CVE-2026-9797 |
medium | 6.5 | 0.0032 | 2026-11-06 | A flaw was found in Keycloak's administrative services (org.keycloak.services.resources.ad | |
CVE-2026-83494 |
— | — | 0.0017 | 2026-11-06 | A flaw was found in the training-operator. An incorrect object casting in the PyTorchJob V | |
CVE-2026-83493 |
critical | 9.1 | 0.0032 | 2026-11-06 | A flaw was found in distributed-workloads. A remote attacker could exploit a vulnerability | |
CVE-2026-97848 |
medium | 6.5 | 0.0034 | 2026-11-06 | A flaw was found in the token sanitization logic of Keycloak, an open source identity and | |
CVE-2026-97367 |
medium | 6.4 | 0.0027 | 2026-11-06 | A flaw was found in the Keycloak Account REST API where it incorrectly handles session ide | |
CVE-2026-96547 |
medium | 6.5 | 0.0030 | 2026-11-06 | A flaw was found in the Dynamic Client Registration component of Keycloak, an open-source | |
CVE-2026-96460 |
medium | 5.4 | 0.0024 | 2026-11-06 | A flaw was found in the token exchange mechanism of Keycloak. When using Standard Token Ex | |
CVE-2026-96447 |
medium | 4.2 | 0.0023 | 2026-11-06 | A flaw was found in the TokenManager component of Keycloak, an open-source identity and ac | |
CVE-2026-92856 |
medium | 4.9 | 0.0025 | 2026-11-06 | A flaw was found in the SAML brokering component of Keycloak, an identity and access manag | |
CVE-2026-92396 |
medium | 6.8 | 0.0024 | 2026-11-06 | The ShopEngine Gutenberg WooCommerce Builder Blocks Addon WordPress plugin before 2.4.4 d | |
CVE-2026-87784 |
high | 8.8 | 0.0023 | 2026-11-06 | The Cool Media Filter WordPress plugin through 1.0.1 does not perform any capability or no | |
CVE-2026-86606 |
high | 7.5 | 0.0022 | 2026-11-06 | The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more WordPress plugin | |
CVE-2026-19688 |
medium | 6.8 | 0.0036 | 2026-11-06 | A flaw was found in the Admin REST API of Keycloak, an identity and access management solu | |
CVE-2026-12967 |
medium | 6.5 | 0.0017 | 2026-11-06 | The WCFM Membership WordPress plugin before 2.12.1 does not verify that payment was made | |
CVE-2026-120408 |
high | 8.0 | 0.0023 | 2026-11-06 | The All-in-One Video Gallery WordPress plugin before 5.1.0 does not escape a video's stor | |
CVE-2026-119259 |
medium | 5.3 | 0.0018 | 2026-11-06 | The All-in-One Video Gallery WordPress plugin before 5.1.0 does not check the type, statu | |
CVE-2026-118639 |
medium | 6.5 | 0.0022 | 2026-11-06 | The Surfer WordPress plugin before 1.8.1.759 discloses a sensitive API credential to low- | |
CVE-2026-118239 |
medium | 5.6 | 0.0021 | 2026-11-06 | The AutomatorWP WordPress plugin before 6.0.7 does not check that the user completing its | |
CVE-2026-118188 |
medium | 4.3 | 0.0018 | 2026-11-06 | The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes | |
CVE-2026-118187 |
low | 2.7 | 0.0018 | 2026-11-06 | The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes | |
CVE-2026-118186 |
medium | 4.9 | 0.0026 | 2026-11-06 | The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes | |
CVE-2026-118167 |
medium | 5.3 | 0.0021 | 2026-11-06 | The MC4WP: Mailchimp for WordPress plugin before 4.15.0 does not validate that the Mailchi | |
CVE-2026-118045 |
high | 8.7 | 0.0031 | 2026-11-06 | The Ever Accounting WordPress plugin before 2.3.3 does not restrict the file path supplie | |
CVE-2026-116533 |
critical | 9.8 | 0.0053 | 2026-11-06 | The Static Snapshot WordPress plugin through 0.2.1 does not sanitise shell metacharacters | |
CVE-2026-115673 |
high | 7.5 | 0.0027 | 2026-11-06 | The Anti-Spam, Spam FireWall by CleanTalk WordPress plugin before 6.91 does not escape a c | |
CVE-2026-115230 |
critical | 9.8 | 0.0042 | 2026-11-06 | The WHIZZ WordPress plugin through 1.1.8 does not validate the password-reset key before u | |
CVE-2026-114427 |
medium | 6.8 | 0.0029 | 2026-11-06 | The GutenKit WordPress plugin before 2.5.5 does not properly sanitize custom CSS saved ag | |
CVE-2026-113615 |
critical | 9.8 | 0.0053 | 2026-11-06 | 1 PoC | The GS JWT Authentication for WP REST API WordPress plugin through 1.0.0 does not sanitize |
CVE-2026-113584 |
critical | 9.8 | 0.0043 | 2026-11-06 | The placester WordPress plugin through 1.4.3 does not perform any capability, nonce or own | |
CVE-2026-110955 |
critical | 9.8 | 0.0034 | 2026-11-06 | The Wurdey WordPress plugin through 1.0.0 does not verify a request signature before loggi | |
CVE-2026-110813 |
high | 7.5 | 0.0027 | 2026-11-06 | The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not properly sanitiz | |
CVE-2026-110532 |
high | 8.6 | 0.0032 | 2026-11-06 | The Mail Mage WordPress plugin through 0.0.25 does not properly sanitise and escape a user | |
CVE-2026-110525 |
high | 8.8 | 0.0043 | 2026-11-06 | The MCB WordPress plugin through 1.0.0 does not sanitise or escape request header values | |
CVE-2026-109081 |
medium | 6.8 | 0.0046 | 2026-11-06 | A flaw was found in Keycloak. The Dynamic Client Registration (DCR) endpoint does not prop | |
CVE-2026-107124 |
medium | 6.4 | 0.0042 | 2026-11-06 | A flaw was found in the OIDC logout endpoint of the keycloak-services component, which han | |
CVE-2026-123037 |
medium | 6.7 | 0.0011 | 2026-11-06 | A flaw was found in the ansible-core user module. When generate_ssh_key is enabled, User.s |