CVE Find is a real-time vulnerability database indexing 419 533 security flaws (CVE) from MITRE, NVD, CISA KEV, CWE and CAPEC. 3038 new CVEs were published in the last 7 days.
Data aggregated from: MITRE Corporation (CVE, CWE, CAPEC), National Vulnerability Database – NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).
| CVE ID | Published | Description | Score | Severity | |
|---|---|---|---|---|---|
CVE-2026-82960 |
2026-11-05 14h17 +00:00 |
Improper Control of Generation of Code ('Code Injection') in ModelFormField in the Apache OFBiz cms ... Code Injection |
8.8 |
High |
|
CVE-2026-82912 |
2026-11-05 14h17 +00:00 |
Improper Neutralization of Special Elements Used in an Expression Language Statement ('Expression La... |
8.8 |
High |
|
CVE-2026-117691 |
2026-11-05 14h17 +00:00 |
A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs beca... |
9.1 |
Critical |
|
CVE-2026-83542 |
2026-11-05 13h59 +00:00 |
Improper Control of Generation of Code ('Code Injection') in Apache OFBiz 24.09 before 24.09.08 on a... Code Injection |
9.8 |
Critical |
|
CVE-2026-84183 |
2026-11-05 13h58 +00:00 |
Incorrect Authorization in the updateLayout simple-method in applications/content/minilang/layout/La... Authorization problems |
8.8 |
High |
|
CVE-2026-123018 |
2026-11-05 12h17 +00:00 |
A security flaw has been discovered in eosphoros-ai DB-GPT up to 0.8.2. This issue affects the funct... Code Injection |
8.3 |
High |
|
CVE-2026-96677 |
2026-11-05 11h54 +00:00 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i... Cross-site Scripting |
10 |
Critical |
|
CVE-2026-118869 |
2026-11-05 09h17 +00:00 |
An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker... OS Command Injection |
8.8 |
High |
|
CVE-2026-100109 |
2026-11-05 08h17 +00:00 |
The Security For WooCommerce WordPress plugin from 1.0.10 to 1.0.16 does not perform capability chec... |
9.8 |
Critical |
|
CVE-2026-123033 |
2026-11-05 06h58 +00:00 |
Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25.10.... |
8.3 |
High |