Sources:
amazon_linux
archlinux
azure_linux
bitnami_vulndb
capec
capec_enrichment_dashboard
certeu
certfr
circl_kev
cisa_known_exploited
cna_scorecard
cnvd
csaf_abb
csaf_adstecindustrialitgmbh
csaf_amd
csaf_aumariestergmbhcokg
csaf_baadem2mproductsgmbh
csaf_beckhoffautomationgmbhcokg
csaf_bendergmbhcokg
csaf_bosch
csaf_bsi
csaf_bsi_aggregator
csaf_bsi_cvd_white
csaf_bsi_white
csaf_bsi_wid_white
csaf_carlogavazziautomation
csaf_certbund
csaf_certvde
csaf_cisa
csaf_cisa_it
csaf_cisa_ot
csaf_cisco
csaf_claaskgaa
csaf_codesysgmbh
csaf_dell
csaf_duraggmbh
csaf_endresshauserag
csaf_ericsson
csaf_euchnergmbhcokg
csaf_festosecokg
csaf_frauschersensortechnikgmbh
csaf_hancom
csaf_harmaninternational
csaf_helmholzgmbhcokg
csaf_himapaulhildebrandtgmbh
csaf_hitachi
csaf_hpe
csaf_huawei
csaf_hydacinternationalgmbh
csaf_ibm
csaf_ifmelectronicgmbh
csaf_janitzaelectronicsgmbh
csaf_jumogmbhcokg
csaf_juniper
csaf_kebautomationkg
csaf_kukaag
csaf_lenovo
csaf_lenzese
csaf_mbconnectlinegmbh
csaf_mettlertoledogmbh
csaf_metzconnectgmbh
csaf_microsoft
csaf_mieleciekg
csaf_moxa
csaf_murrelektronikgmbh
csaf_ncscnl
csaf_ndaal
csaf_netapp
csaf_nozomi
csaf_nozominetworks
csaf_nvidia
csaf_opcfoundation
csaf_openeuler
csaf_opensuse
csaf_oracle
csaf_ox
csaf_paloalto
csaf_panasonic
csaf_pentagrid
csaf_pepperlfuchsse
csaf_phoenix
csaf_pilzgmbhcokg
csaf_qnap
csaf_redhat
csaf_samsung
csaf_sauterag
csaf_schneider
csaf_sick
csaf_siemens
csaf_smasolartechnologyag
csaf_suse
csaf_swarcotrafficsystemsgmbh
csaf_synology
csaf_tibco
csaf_trend
csaf_trumpfsecokg
csaf_trustsource
csaf_tuxcare
csaf_ubiquiti
csaf_vartastoragegmbh
csaf_vegagrieshaberkg
csaf_vmware
csaf_wagogmbhcokg
csaf_weidmuellerinterfacegmbhcokg
csaf_welotecgmbh
csaf_wiesemanntheisgmbh
csaf_yaskawaeuropegmbh
csaf_yokogawa
csaf_zyxel
cve_forecast
cve_icu
cve_vs_github_dashboard
cvelistv5
cwe_dashboard
cwe_enrichment
cwec
debian_rustsec
debian_security_tracker
drupal
emb3d
emb3d_dashboard
epss_dashboard
epss_history
epss_kev_enrichment
euvd_kev
fedora
fkie_nvd
freebsd
gcve
gcve_enriched
gcve_enrichment
gcve_enrichment_dashboard
gentoo
github
gsd
jvn
kev_ransomware
mitre_attack
moksha
ndaal_kev
netbsd
nuclei_dashboard
nuclei_enrichment
nvd
nvd_cpe_dictionary
openbsd
opencve
oracle_linux
ossf_malicious_packages
osv_almalinux
osv_alpine
osv_android
osv_bellsoft
osv_chainguard
osv_cran
osv_github_actions
osv_golang
osv_haskell
osv_hex
osv_linux
osv_maven
osv_npm
osv_nuget
osv_ocaml
osv_ossfuzz
osv_packagist
osv_pub
osv_rocky
osv_rubygems
osv_rustsec
osv_swift
osv_ubuntu
osv_wolfi
publish_stats
pysec
sadp_pilot
ssvc
ssvc_dashboard
tailscale
tsunami_enrichment
variot
vulncheck_kev
vulnrichment
Clear
| ID | Title | Severity | CVSS | Source | Updated |
|---|---|---|---|---|---|
| cve-2026-62041 | WordPress WP Event Manager plugin <= 3.4.1 - Broken Access Control vulnerability | MEDIUM | 5.4 | cvelistv5 | 2026-11-05 |
| cve-2026-112072 | vault-java-driver: stored deeply nested JSON kills every thread that reads it | MEDIUM | 6.5 | cvelistv5 | 2026-11-05 |
| cve-2026-109408 | vault-java-driver: SslConfig silently disables requested TLS verification | HIGH | 7.4 | cvelistv5 | 2026-11-05 |
| cve-2026-107776 | Dokan < 5.3.3 - Vendor+ Reverse Withdrawal Ledger Credit Without Payment via Discount Coupon | LOW | 2.2 | cvelistv5 | 2026-11-05 |
| cve-2026-100109 | Security For WooCommerce 1.0.10 - 1.0.16 - Unauthenticated Privilege Escalation via usfw_create_temporary_user | CRITICAL | 9.8 | cvelistv5 | 2026-11-05 |
| cve-2026-80335 | cve-2026-80335 | HIGH | 7.6 | cvelistv5 | unknown |
| cve-2026-79405 | cve-2026-79405 | HIGH | 7.5 | cvelistv5 | unknown |
| cve-2026-16438 | cve-2026-16438 | CRITICAL | 9.4 | cvelistv5 | unknown |
| cve-2026-16437 | cve-2026-16437 | HIGH | 7.1 | cvelistv5 | unknown |
| cve-2026-16436 | cve-2026-16436 | CRITICAL | 9.2 | cvelistv5 | unknown |
| cve-2026-13584 | cve-2026-13584 | HIGH | 7.1 | cvelistv5 | unknown |
| cve-2026-123033 | cve-2026-123033 | HIGH | 8.3 | cvelistv5 | unknown |
| cve-2026-123029 | cve-2026-123029 | HIGH | 7.5 | cvelistv5 | unknown |
| cve-2026-123025 | cve-2026-123025 | CRITICAL | 9.4 | cvelistv5 | unknown |
| cve-2026-123017 | cve-2026-123017 | MEDIUM | 6.5 | cvelistv5 | unknown |
| cve-2026-91049 | EWWW Image Optimizer 8.7.4 - 8.9.0 - Author+ Stored XSS via 'data-script' Lazy Load Attribute | UNKNOWN | cvelistv5 | 2026-11-05 | |
| cve-2026-90967 | Essential Real Estate < 5.3.5 - Customer+ Invoice PII Disclosure via IDOR | UNKNOWN | cvelistv5 | 2026-11-05 | |
| cve-2026-90966 | Essential Real Estate < 5.3.5 - Customer+ Arbitrary Paid Package Activation and Forged Paid Invoice via ere_free_package_ajax | UNKNOWN | cvelistv5 | 2026-11-05 | |
| cve-2026-90965 | Essential Real Estate < 5.3.5 - Unauthenticated Unpublished Listing Image Disclosure | UNKNOWN | cvelistv5 | 2026-11-05 | |
| cve-2026-90964 | Essential Real Estate < 5.3.5 - Unauthenticated Arbitrary Email Sending | UNKNOWN | cvelistv5 | 2026-11-05 | |
| cve-2026-90963 | Essential Real Estate < 5.3.5 - Unauthenticated Unpublished Property Listing and Agent Contact Disclosure via property_print_ajax | UNKNOWN | cvelistv5 | 2026-11-05 | |
| cve-2026-88814 | YITH WooCommerce Gift Cards < 4.38.1 - Unauthenticated Gift Card Balance Double-Spending via Race Condition | UNKNOWN | cvelistv5 | 2026-11-05 | |
| cve-2026-87856 | Subscriptions for WooCommerce 2.0.0 - 2.1.0 - Unauthenticated Membership Content Restriction Bypass | UNKNOWN | cvelistv5 | 2026-11-05 | |
| cve-2026-86795 | Community Events < 1.6.0 - Unauthenticated Pending Events Disclosure via ajax_admin_event_list | UNKNOWN | cvelistv5 | 2026-11-05 | |
| cve-2026-86442 | WP Event Manager 3.4.0 - 3.4.1 - Unauthenticated Unpublished Post Overwrite via IDOR | UNKNOWN | cvelistv5 | 2026-11-05 | |
| cve-2026-85570 | Tutor LMS 1.6.4 - 4.1.3 - Subscriber+ Quiz Answer Key Disclosure | UNKNOWN | cvelistv5 | 2026-11-05 | |
| cve-2026-85351 | FV Player < 7.5.56.7212 - Contributor+ SSRF via Media Library Import | UNKNOWN | cvelistv5 | 2026-11-05 | |
| cve-2026-85347 | FV Player < 7.5.56.7212 - Contributor+ Stored XSS via Text Lightbox Caption | UNKNOWN | cvelistv5 | 2026-11-05 | |
| cve-2026-85346 | FV Player < 7.5.56.7212 - Subscriber+ Cloud Storage File Disclosure via Media Browser Handlers | UNKNOWN | cvelistv5 | 2026-11-05 | |
| cve-2026-19256 | All In One Login 2.4.0 - 2.4.1 - Unauthenticated Account Takeover via Email OTP Brute Force | UNKNOWN | cvelistv5 | 2026-11-05 |