Browse All CVEs
50,486 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-63218 |
medium | 6.5 | 0.0037 | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa | |
CVE-2026-63217 |
medium | 6.5 | 0.0030 | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa | |
CVE-2026-63215 |
high | 8.3 | 0.0032 | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa | |
CVE-2026-63214 |
high | 8.8 | 0.0046 | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa | |
CVE-2026-63213 |
high | 7.2 | 0.0055 | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa | |
CVE-2026-63111 |
high | 7.1 | 0.0027 | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa | |
CVE-2026-61651 |
high | 8.3 | 0.0032 | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa | |
CVE-2026-61649 |
high | 7.7 | 0.0030 | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa | |
CVE-2026-123208 |
high | 7.7 | 0.0038 | 2026-11-05 | noname Electron desktop build v1.11.2 through v1.11.6.1 contains an unauthenticated local | |
CVE-2026-123207 |
low | 2.3 | 0.0024 | 2026-11-05 | LibreTV before v2.21.2 contains a server-side request forgery vulnerability that allows au | |
CVE-2026-123206 |
medium | 6.3 | 0.0046 | 2026-11-05 | EdgeChat before 2.20.3 contains a missing authentication vulnerability in the GET /files/: | |
CVE-2026-123205 |
high | 8.3 | 0.0042 | 2026-11-05 | accel-ppp before 1.15.0 contains a heap buffer overflow vulnerability in the tcp, syslog a | |
CVE-2026-123204 |
medium | 5.3 | 0.0030 | 2026-11-05 | Posta before v0.18.0 contains a server-side request forgery vulnerability that allows auth | |
CVE-2026-123203 |
medium | 6.9 | 0.0014 | 2026-11-05 | NEURON (CoreNEURON) through 9.0.2 contains a stack buffer overflow vulnerability that allo | |
CVE-2026-123202 |
high | 8.7 | 0.0070 | 2026-11-05 | libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxml_par | |
CVE-2026-123201 |
medium | 6.3 | 0.0039 | 2026-11-05 | Buku (bukuserver) through 5.1.1 contains an unauthenticated server-side request forgery vu | |
CVE-2026-123200 |
high | 8.7 | 0.0045 | 2026-11-05 | VRPN through 07.36 contains an out-of-bounds stack write vulnerability in vrpn_Endpoint::h | |
CVE-2026-123199 |
medium | 6.8 | 0.0014 | 2026-11-05 | eBook-speaker 6.1.0 through 6.2.0 contains a stack buffer overflow vulnerability in get_at | |
CVE-2026-123198 |
critical | 9.3 | 0.0084 | 2026-11-05 | LMFDB before commit 01829bd contains a server-side template injection vulnerability in the | |
CVE-2026-123197 |
medium | 6.9 | 0.0042 | 2026-11-05 | WPPConnect Server through 2.10.76 contains a missing authentication vulnerability that all | |
CVE-2026-123196 |
high | 8.6 | 0.0036 | 2026-11-05 | Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unau | |
CVE-2026-118494 |
high | 8.2 | 0.0047 | 2026-11-05 | Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1. | |
CVE-2026-116472 |
low | 2.7 | 0.0041 | 2026-11-05 | A security issue was discovered in ingress-nginx where a user with permission to create an | |
CVE-2026-115451 |
medium | 6.9 | 0.0025 | 2026-11-05 | Joomla Extension - tassos.gr - File deletion through improper access control in Advanced C | |
CVE-2026-101542 |
high | 8.8 | 0.0032 | 2026-11-05 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Intern | |
CVE-2026-101536 |
high | 7.5 | 0.0033 | 2026-11-05 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: | |
CVE-2026-101535 |
high | 7.5 | 0.0033 | 2026-11-05 | Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component | |
CVE-2026-101529 |
critical | 9.9 | 0.0042 | 2026-11-05 | Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enter | |
CVE-2026-101528 |
critical | 9.9 | 0.0042 | 2026-11-05 | Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enter | |
CVE-2026-101526 |
high | 8.8 | 0.0042 | 2026-11-05 | Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Man | |
CVE-2026-101525 |
high | 8.8 | 0.0042 | 2026-11-05 | Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Man | |
CVE-2026-101518 |
high | 8.8 | 0.0042 | 2026-11-05 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise | |
CVE-2026-101503 |
critical | 9.9 | 0.0042 | 2026-11-05 | Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported | |
CVE-2026-101457 |
high | 8.8 | 0.0045 | 2026-11-05 | Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: | |
CVE-2026-69145 |
medium | 6.5 | 0.0027 | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa | |
CVE-2026-69144 |
medium | 6.5 | 0.0031 | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa | |
CVE-2026-69140 |
high | 8.3 | 0.0030 | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa | |
CVE-2026-69137 |
high | 7.7 | 0.0376 | 2026-11-05 | 1 PoC | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa |
CVE-2026-69136 |
high | 7.1 | 0.0023 | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa | |
CVE-2026-69135 |
high | 8.8 | 0.0036 | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa | |
CVE-2026-61653 |
high | 8.3 | 0.0025 | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa | |
CVE-2026-61650 |
high | 8.1 | 0.0024 | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa | |
CVE-2026-61648 |
high | 8.3 | 0.0025 | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa | |
CVE-2026-107903 |
high | 8.6 | 0.0034 | 2026-11-05 | Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gr | |
CVE-2026-107130 |
medium | 6.9 | 0.0037 | 2026-11-05 | Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gri | |
CVE-2026-107129 |
high | 8.3 | 0.0040 | 2026-11-05 | Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversa | |
CVE-2026-54914 |
high | 8.3 | 0.0040 | 2026-11-05 | WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. P | |
CVE-2026-54913 |
medium | 6.9 | 0.0030 | 2026-11-05 | WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. P | |
CVE-2026-54912 |
high | 8.8 | 0.0045 | 2026-11-05 | WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. P | |
CVE-2026-102927 |
medium | 5.9 | 0.0032 | 2026-11-05 | HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1 |