Browse All CVEs
29,336 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-105042 |
— | — | — | 2026-10-29 | A message body that is deeply nested and decoded by pn_message_body() could overflow the s | |
CVE-2026-114230 |
— | — | — | 2026-10-29 | When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP fram | |
CVE-2026-105031 |
— | — | — | 2026-10-29 | When using the OpenSSL TLS implementation, both the pn_ssl_domain_set_trusted_ca_db() & pn | |
CVE-2026-91152 |
medium | 6.1 | — | 2026-10-29 | The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | |
CVE-2026-91153 |
medium | 5.3 | — | 2026-10-29 | The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | |
CVE-2026-116763 |
medium | 5.4 | — | 2026-10-29 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via | |
CVE-2026-118192 |
medium | 6.5 | — | 2026-10-29 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is | |
CVE-2026-110707 |
medium | 4.7 | — | 2026-10-29 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggr | |
CVE-2026-111318 |
medium | 5.4 | — | 2026-10-29 | The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPre | |
CVE-2026-107743 |
high | 7.2 | — | 2026-10-29 | The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in v | |
CVE-2026-109215 |
medium | 6.4 | — | 2026-10-29 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via | |
CVE-2026-107627 |
medium | 5.4 | — | 2026-10-29 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to S | |
CVE-2026-107629 |
medium | 5.4 | — | 2026-10-29 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to S | |
CVE-2026-103875 |
medium | 4.7 | — | 2026-10-29 | The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scr | |
CVE-2026-104727 |
medium | 6.4 | — | 2026-10-29 | The Sequential Order Numbers for WooCommerce plugin for WordPress is vulnerable to Stored | |
CVE-2026-103485 |
medium | 5.4 | — | 2026-10-29 | The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cros | |
CVE-2026-96889 |
high | 7.8 | 0.0053 | 2026-10-29 | 5 PoC | A flaw was found in librsvg. When processing an SVG document containing nested XML inclusi |
CVE-2026-117611 |
high | 7.1 | — | 2026-10-29 | Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL) | |
CVE-2026-111418 |
high | 7.5 | — | 2026-10-29 | A server-side request forgery (SSRF) vulnerability exists in the Foxit official website’s | |
CVE-2026-111419 |
high | 8.6 | — | 2026-10-29 | A sensitive information exposure vulnerability exists on the Foxit official website becaus | |
CVE-2026-111417 |
high | 7.5 | — | 2026-10-29 | A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF c | |
CVE-2026-88941 |
medium | 6.2 | — | 2026-10-29 | Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky S | |
CVE-2026-114358 |
critical | 9.3 | — | 2026-10-29 | This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation | |
CVE-2026-7190 |
medium | 5.1 | — | 2026-10-29 | A cross-site scripting (XSS) vulnerability in the ICTBroadcast software, which affects the | |
CVE-2026-85498 |
low | 3.5 | — | 2026-10-29 | A flaw was found in polkit. When processing input that begins with a null byte, an arithme | |
CVE-2025-49794 |
critical | 9.1 | 0.0083 | 2026-10-29 | A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath | |
CVE-2026-115303 |
low | 3.7 | — | 2026-10-29 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not strip CR/LF characte | |
CVE-2026-117174 |
— | — | — | 2026-10-29 | Rejected reason: VUL-2026-008368 為先回報之相同問題 | |
CVE-2024-0340 |
medium | 4.4 | 0.0024 | 2026-10-29 | A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, w | |
CVE-2025-62841 |
high | 8.7 | — | 2026-10-29 | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hyb | |
CVE-2026-39991 |
medium | 4.8 | 0.0029 | 2026-10-29 | A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If | |
CVE-2025-62839 |
high | 8.7 | — | 2026-10-29 | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hyb | |
CVE-2026-32557 |
critical | 9.3 | 0.0037 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2024-3056 |
high | 7.7 | 0.0054 | 2026-10-29 | A flaw was found in Podman. This issue may allow an attacker to create a specially crafted | |
CVE-2026-97320 |
medium | 5.3 | 0.0025 | 2026-10-29 | A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected el | |
CVE-2026-97324 |
medium | 6.9 | 0.0028 | 2026-10-29 | A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affect | |
CVE-2026-118030 |
medium | 4.2 | — | 2026-10-29 | A flaw was found in the HOTP authentication mechanism of the keycloak-services component, | |
CVE-2024-1394 |
high | 7.5 | 0.0153 | 2026-10-29 | A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might | |
CVE-2026-117859 |
medium | 5.4 | — | 2026-10-29 | A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-se | |
CVE-2026-117627 |
medium | 5.4 | — | 2026-10-29 | A flaw was found in the JWT Authorization Grant implementation of the keycloak-services co | |
CVE-2026-117688 |
medium | 5.3 | — | 2026-10-29 | A flaw was found in the client registration component of Keycloak, an open-source identity | |
CVE-2026-117548 |
medium | 6.5 | — | 2026-10-29 | A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN | |
CVE-2024-3586 |
low | 3.5 | — | 2026-10-29 | The LetterPress WordPress plugin before 2.4.0 does not sanitise and escape some of its se | |
CVE-2026-103693 |
critical | 9.0 | — | 2026-10-29 | The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before | |
CVE-2026-105258 |
low | 3.5 | — | 2026-10-29 | The Appointment Booking Plugin WordPress plugin before 5.7.6 does not escape several book | |
CVE-2026-108685 |
low | 3.7 | — | 2026-10-29 | The WP Post Author WordPress plugin before 4.2.0 does not check that the account was crea | |
CVE-2026-108686 |
low | 3.7 | — | 2026-10-29 | The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settin | |
CVE-2026-108763 |
medium | 4.3 | — | 2026-10-29 | The Wallet System for WooCommerce WordPress plugin before 2.8.2 does not restrict its KYC | |
CVE-2026-110030 |
medium | 5.3 | — | 2026-10-29 | The Hide Price Until Login WordPress plugin before 1.1.2 does not restrict a guest-registr | |
CVE-2026-110504 |
medium | 6.8 | — | 2026-10-29 | The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not sanitize uploa |