CVE Find is a real-time vulnerability database indexing 419 464 security flaws (CVE) from MITRE, NVD, CISA KEV, CWE and CAPEC. 3070 new CVEs were published in the last 7 days.
Data aggregated from: MITRE Corporation (CVE, CWE, CAPEC), National Vulnerability Database – NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).
| CVE ID | Published | Description | Score | Severity | |
|---|---|---|---|---|---|
CVE-2026-123018 |
2026-11-05 12h17 +00:00 |
A security flaw has been discovered in eosphoros-ai DB-GPT up to 0.8.2. This issue affects the funct... Code Injection |
8.3 |
High |
|
CVE-2026-96677 |
2026-11-05 11h54 +00:00 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i... Cross-site Scripting |
10 |
Critical |
|
CVE-2026-118869 |
2026-11-05 09h17 +00:00 |
An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker... OS Command Injection |
8.8 |
High |
|
CVE-2026-100109 |
2026-11-05 08h17 +00:00 |
The Security For WooCommerce WordPress plugin from 1.0.10 to 1.0.16 does not perform capability chec... |
9.8 |
Critical |
|
CVE-2026-123033 |
2026-11-05 06h58 +00:00 |
Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25.10.... |
8.3 |
High |
|
CVE-2026-123025 |
2026-11-05 06h29 +00:00 |
An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of th... OS Command Injection |
9.4 |
Critical |
|
CVE-2026-118193 |
2026-11-05 05h18 +00:00 |
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Privil... Improper Privilege Management |
8.8 |
High |
|
CVE-2026-93389 |
2026-11-05 04h48 +00:00 |
The LiteSpeed Cache plugin for WordPress is vulnerable to unauthenticated disclosure of sensitive Wo... |
8.2 |
High |
|
CVE-2026-122321 |
2026-11-05 03h17 +00:00 |
Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached... |
9.1 |
Critical |
|
CVE-2026-122316 |
2026-11-05 03h17 +00:00 |
Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-exist... Authorization problems |
8.5 |
High |