CVE Vulnerability Database
Search and browse 420,242 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111089 | HIGH | 7.6 | 0.3% | Nov 1, 2026 | Apache Wicket reads texts from the application's resource bundles — a localized label, a css class name — and writes som... |
| CVE-2026-82898 | LOW | 2.1 | 0.3% | Nov 1, 2026 | Incorrect order of security checks in Apache Wicket. org.apache.wicket.protocol.http.ResourceIsolationRequestCycleListe... |
| CVE-2026-82840 | HIGH | 7.2 | 0.3% | Nov 1, 2026 | Session fixation in Apache Wicket. org.apache.wicket.authroles.authentication.AuthenticatedWebSession is the authentica... |
| CVE-2026-82705 | MEDIUM | 6.3 | 0.3% | Nov 1, 2026 | Missing authorization in Apache Wicket. org.apache.wicket.authorization.IAuthorizationStrategy declares isResourceAutho... |
| CVE-2026-82704 | MEDIUM | 6.9 | 0.3% | Nov 1, 2026 | Missing authorization in Apache Wicket. org.apache.wicket.core.request.handler.ListenerRequestHandler invokes an IReque... |
| CVE-2026-82559 | LOW | 2.3 | 0.3% | Nov 1, 2026 | Insufficient session expiration in Apache Wicket. org.apache.wicket.protocol.ws.WebSocketSettings#newWebSocketRequest()... |
| CVE-2026-82558 | LOW | 2.3 | 0.3% | Nov 1, 2026 | Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSocketBehavior, through which Wicket's nat... |
| CVE-2026-82557 | MEDIUM | 6.9 | 0.3% | Nov 1, 2026 | Missing authorization in Apache Wicket. org.apache.wicket.markup.html.form.Form resolves the component that submitted a... |
| CVE-2026-82115 | MEDIUM | 6.3 | 0.3% | Nov 1, 2026 | Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSocketMessageBroadcastHandler, the request... |
| CVE-2026-120274 | MEDIUM | 4.7 | 0.2% | Nov 1, 2026 | A vulnerability was identified in beecue FastBee up to 2.1.0. Affected by this issue is some unknown functionality of th... |
| CVE-2026-120242 | LOW | 2.4 | 0.2% | Nov 1, 2026 | A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1... |
| CVE-2026-120241 | HIGH | 7.5 | 0.6% | Nov 1, 2026 | A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)... |
| CVE-2026-120240 | CRITICAL | 9.9 | 1.7% | Nov 1, 2026 | A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the fil... |
| CVE-2026-120239 | CRITICAL | 9.9 | 1.7% | Nov 1, 2026 | A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the ... |
| CVE-2026-120238 | CRITICAL | 9.9 | 1.7% | Nov 1, 2026 | A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file /bin/... |
| CVE-2026-120237 | MEDIUM | 4.3 | 0.4% | Nov 1, 2026 | A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected by this issue is the function isInterruptExpired of... |
| CVE-2026-74760 | HIGH | 8.8 | 0.1% | Nov 1, 2026 | Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process because the gc... |
| CVE-2026-74759 | CRITICAL | 9.8 | 0.2% | Nov 1, 2026 | Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS exte... |
| CVE-2026-120236 | MEDIUM | 6.3 | 0.3% | Nov 1, 2026 | A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown function... |
| CVE-2026-66570 | HIGH | 7.1 | 0.2% | Nov 1, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss WordPress... |
| CVE-2026-62048 | CRITICAL | 9.3 | 0.3% | Nov 1, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / Stell... |
| CVE-2026-120338 | CRITICAL | 10 | 0.8% | Nov 1, 2026 | Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno ... |
| CVE-2026-120235 | MEDIUM | 4.3 | 0.4% | Nov 1, 2026 | A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.58. Affected is the function parseSSEStream... |
| CVE-2026-120234 | MEDIUM | 4.3 | 0.3% | Nov 1, 2026 | A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. This impacts the function e.text of the component H... |
| CVE-2026-120233 | MEDIUM | 5.3 | 0.4% | Nov 1, 2026 | A security flaw has been discovered in ag-ui-protocol ag-ui up to 0.0.58. This affects an unknown function of the file s... |