Browse All CVEs
10,440 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-53520 |
medium | 6.5 | 0.0034 | 2026-10-29 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M | |
CVE-2026-53521 |
medium | 6.4 | 0.0027 | 2026-10-29 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M | |
CVE-2026-53522 |
medium | 6.5 | 0.0035 | 2026-10-29 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M | |
CVE-2026-53523 |
medium | 6.8 | 0.0029 | 2026-10-29 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M | |
CVE-2026-34025 |
medium | 5.3 | 0.0028 | 2026-10-29 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP rest | |
CVE-2026-34027 |
medium | 5.3 | 0.0031 | 2026-10-29 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains insufficie | |
CVE-2026-34028 |
medium | 6.9 | 0.0040 | 2026-10-29 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessi | |
CVE-2026-34029 |
medium | 6.8 | 0.0012 | 2026-10-29 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a hard-cod | |
CVE-2026-34030 |
medium | 6.9 | 0.0033 | 2026-10-29 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, does not sufficient | |
CVE-2026-48969 |
medium | 6.5 | 0.0026 | 2026-10-29 | Subscriber Broken Access Control in Really Simple SSL <= 9.5.9 versions. | |
CVE-2026-10634 |
medium | 5.3 | 0.0027 | 2026-10-29 | Zephyr's native TCP stack iterates the global connection list in net_tcp_foreach() (subsys | |
CVE-2026-6039 |
medium | 5.4 | 0.0020 | 2026-10-29 | LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer over | |
CVE-2026-6040 |
medium | 5.4 | 0.0016 | 2026-10-29 | A heap use-after-free existed when importing the blank-width characters of an ODF number f | |
CVE-2026-6045 |
medium | 5.4 | 0.0021 | 2026-10-29 | LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer ov | |
CVE-2026-6047 |
medium | 5.4 | 0.0015 | 2026-10-29 | LibreOffice can import documents in the OOXML format (DOCX). A heap buffer overflow existe | |
CVE-2026-8356 |
medium | 5.4 | 0.0015 | 2026-10-29 | LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overf | |
CVE-2026-8357 |
medium | 5.4 | 0.0022 | 2026-10-29 | LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow | |
CVE-2026-8358 |
medium | 5.4 | 0.0023 | 2026-10-29 | LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer ove | |
CVE-2026-11931 |
medium | 6.8 | 0.0012 | 2026-10-29 | Incorrect default permissions in Kiro IDE on macOS and Linux before version 0.11.133 could | |
CVE-2026-49953 |
medium | 6.9 | 0.0036 | 2026-10-29 | Discuz! X5.0 releases 20260320 through 20260610 contains a CAPTCHA bypass vulnerability th | |
CVE-2026-25440 |
medium | 5.3 | 0.0021 | 2026-10-29 | Unauthenticated Broken Access Control in Essential Addons for Elementor < 6.6.0 versions. | |
CVE-2026-39451 |
medium | 6.3 | 0.0018 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in WP Google Review Slider <= 18.0 versions. | |
CVE-2026-39468 |
medium | 6.8 | 0.0122 | 2026-10-29 | Contributor Arbitrary File Deletion in Meta Box – WordPress Custom Fields Framework <= 5.1 | |
CVE-2026-39489 |
medium | 4.4 | 0.0034 | 2026-10-29 | Author Arbitrary File Download in Download Monitor <= 5.1.9 versions. | |
CVE-2026-39491 |
medium | 6.5 | 0.0023 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in JupiterX Core <= 4.14.1 versions. | |
CVE-2026-39515 |
medium | 6.5 | 0.0035 | 2026-10-29 | Subscriber Broken Access Control in Motors < 1.4.107 versions. | |
CVE-2026-39525 |
medium | 6.5 | 0.0024 | 2026-10-29 | Unauthenticated Broken Access Control in Booking Activities <= 1.16.48.1 versions. | |
CVE-2026-39527 |
medium | 5.4 | 0.0029 | 2026-10-29 | Subscriber Arbitrary File Upload in WpStream < 4.11.2 versions. | |
CVE-2026-39540 |
medium | 6.5 | 0.0021 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in Shipment Tracker for Woocommerce <= 1.5.3.2 versi | |
CVE-2026-39584 |
medium | 6.5 | 0.0033 | 2026-10-29 | Subscriber Broken Access Control in RepairBuddy <= 4.1132 versions. | |
CVE-2026-39594 |
medium | 6.4 | 0.0029 | 2026-10-29 | Subscriber Broken Access Control in Ultra Addons for WPForms <= 1.0.11 versions. | |
CVE-2026-40743 |
medium | 6.5 | 0.0025 | 2026-10-29 | Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions. | |
CVE-2026-40773 |
medium | 6.5 | 0.0028 | 2026-10-29 | Subscriber Broken Access Control in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.9 | |
CVE-2026-40782 |
medium | 6.5 | 0.0024 | 2026-10-29 | Unauthenticated Broken Access Control in WPAdverts <= 2.3.0 versions. | |
CVE-2026-40790 |
medium | 6.5 | 0.0033 | 2026-10-29 | Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions. | |
CVE-2026-40792 |
medium | 6.3 | 0.0025 | 2026-10-29 | Subscriber Insecure Direct Object References (IDOR) in KiviCare <= 4.2.1 versions. | |
CVE-2026-40793 |
medium | 6.5 | 0.0028 | 2026-10-29 | Subscriber Broken Access Control in Groundhogg < 4.4.1 versions. | |
CVE-2026-40795 |
medium | 6.5 | 0.0027 | 2026-10-29 | Subscriber Broken Access Control in Amelia <= 2.2 versions. | |
CVE-2026-40796 |
medium | 6.5 | 0.0034 | 2026-10-29 | Subscriber Sensitive Data Exposure in WPPizza <= 3.19.9 versions. | |
CVE-2026-40799 |
medium | 5.3 | 0.0031 | 2026-10-29 | Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions. | |
CVE-2026-41556 |
medium | 6.5 | 0.0021 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions. | |
CVE-2026-42378 |
medium | 6.5 | 0.0039 | 2026-10-29 | Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions. | |
CVE-2026-42640 |
medium | 6.5 | 0.0019 | 2026-10-29 | Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions. | |
CVE-2026-42651 |
medium | 6.3 | 0.0024 | 2026-10-29 | Subscriber Broken Access Control in Classified Listing <= 5.3.9 versions. | |
CVE-2026-42655 |
medium | 5.9 | 0.0025 | 2026-10-29 | Unauthenticated Bypass Vulnerability in Best Payments Plugin for WP <= 4.6.19 versions. | |
CVE-2026-42656 |
medium | 6.5 | 0.0021 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions. | |
CVE-2026-42657 |
medium | 5.3 | 0.0022 | 2026-10-29 | Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions. | |
CVE-2026-42659 |
medium | 6.5 | 0.0027 | 2026-10-29 | Subscriber Broken Access Control in Advanced Form Integration <= 1.126.12 versions. | |
CVE-2026-42660 |
medium | 6.5 | 0.0034 | 2026-10-29 | Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions. | |
CVE-2026-42662 |
medium | 6.5 | 0.0032 | 2026-10-29 | Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions. |