Browse All CVEs
13,178 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-54057 |
high | 7.3 | 0.0017 | 2026-10-29 | Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.3, kitty's OSC 21 | |
CVE-2026-34195 |
high | 8.8 | 0.0033 | 2026-10-29 | Software installed and run as a non-privileged user may conduct intentional GPU sparse mem | |
CVE-2026-41158 |
high | 7.8 | 0.0012 | 2026-10-29 | Software installed and run as a non-privileged user may conduct GPU system calls to write | |
CVE-2026-46717 |
high | 7.7 | 0.0034 | 2026-10-29 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M | |
CVE-2026-47120 |
high | 7.1 | 0.0031 | 2026-10-29 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M | |
CVE-2026-48119 |
high | 7.1 | 0.0031 | 2026-10-29 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M | |
CVE-2026-49396 |
high | 7.1 | 0.0014 | 2026-10-29 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M | |
CVE-2026-53608 |
high | 8.7 | 0.0026 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Versions up to and incl | |
CVE-2026-12057 |
high | 7.8 | 0.0013 | 2026-10-29 | When the application executes the JavaScript script embedded in the PDF within the sandbox | |
CVE-2026-34021 |
high | 8.6 | 0.0020 | 2026-10-29 | The Wertheim SafeController 5400, Controller 5400 - AssemblyVersion 6.11.8130.22320, uses | |
CVE-2026-34022 |
high | 7.1 | 0.0012 | 2026-10-29 | The Wertheim SafeController Family 65000, Controller 65000 - AssemblyVersion 6.11.8130.223 | |
CVE-2026-34023 |
high | 7.1 | 0.0034 | 2026-10-29 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an incorre | |
CVE-2026-34024 |
high | 8.6 | 0.0030 | 2026-10-29 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains missing au | |
CVE-2026-34026 |
high | 7.1 | 0.0039 | 2026-10-29 | Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a path travers | |
CVE-2026-49062 |
high | 8.8 | 0.0030 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust. | |
CVE-2026-49064 |
high | 7.5 | 0.0024 | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in Stiofan GetPaid allows | |
CVE-2026-49111 |
high | 8.8 | 0.0024 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privileg | |
CVE-2026-5230 |
high | 7.1 | 0.0017 | 2026-10-29 | Improper Access Control, Missing Authorization vulnerability in MIA Technology Inc. Pizzy | |
CVE-2026-5233 |
high | 7.1 | 0.0021 | 2026-10-29 | Improper Control of Interaction Frequency vulnerability in MIA Technology Inc. Pizzy Libra | |
CVE-2026-5242 |
high | 8.8 | 0.0030 | 2026-10-29 | Improper neutralization of formula elements in a CSV file vulnerability in MIA Technology | |
CVE-2026-9863 |
high | 8.8 | 0.0060 | 2026-10-29 | Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade a | |
CVE-2026-36213 |
high | 7.8 | 0.0059 | 2026-10-29 | An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate pr | |
CVE-2026-41708 |
high | 7.5 | 0.0028 | 2026-10-29 | In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that | |
CVE-2026-47835 |
high | 7.5 | 0.0030 | 2026-10-29 | In Spring AI Vector Stores, special characters could be used to force the execution of arb | |
CVE-2026-49954 |
high | 8.6 | 0.0053 | 2026-10-29 | Discuz! X5.0 releases 20260320 through 20260610 contain a local file inclusion vulnerabili | |
CVE-2026-50870 |
high | 7.5 | 0.0038 | 2026-10-29 | An information disclosure vulnerability in the configuration endpoint of Ben Busby whoogle | |
CVE-2026-23970 |
high | 7.1 | 0.0024 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Redirection for Contact Form 7 <= 3.2.8 vers | |
CVE-2026-24637 |
high | 8.5 | 0.0025 | 2026-10-29 | Contributor SQL Injection in PowerPress Podcasting <= 11.15.10 versions. | |
CVE-2026-25425 |
high | 7.5 | 0.0037 | 2026-10-29 | Unauthenticated Broken Access Control in User Registration <= 5.1.2 versions. | |
CVE-2026-27089 |
high | 7.5 | 0.0027 | 2026-10-29 | Unauthenticated Bypass Vulnerability in WpTravelly <= 2.1.7 versions. | |
CVE-2026-27333 |
high | 8.1 | 0.0032 | 2026-10-29 | Unauthenticated Deserialization of untrusted data in Paid Videochat Turnkey Site <= 7.3.23 | |
CVE-2026-27407 |
high | 7.2 | 0.0039 | 2026-10-29 | Editor Privilege Escalation in AI Engine <= 3.4.9 versions. | |
CVE-2026-34886 |
high | 7.5 | 0.0025 | 2026-10-29 | Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions. | |
CVE-2026-34891 |
high | 7.5 | 0.0030 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in IDPay Payment Gateway for Woocommerce <= 2.2.5 | |
CVE-2026-34898 |
high | 7.5 | 0.0025 | 2026-10-29 | Unauthenticated Broken Access Control in Event Tickets Manager for WooCommerce <= 1.5.3 ve | |
CVE-2026-34900 |
high | 7.1 | 0.0018 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.14.2 versions. | |
CVE-2026-34902 |
high | 7.1 | 0.0018 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 4.6.3 vers | |
CVE-2026-39434 |
high | 7.2 | 0.0045 | 2026-10-29 | Shop manager PHP Object Injection in CTX Feed <= 6.6.26 versions. | |
CVE-2026-39435 |
high | 7.1 | 0.0018 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in CformsII <= 15.1.3 versions. | |
CVE-2026-39447 |
high | 7.1 | 0.0024 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.10.6 ver | |
CVE-2026-39449 |
high | 7.1 | 0.0023 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Contact Form to Any API <= 3.0.3 versions. | |
CVE-2026-39450 |
high | 7.1 | 0.0039 | 2026-10-29 | Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions. | |
CVE-2026-39463 |
high | 7.1 | 0.0023 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in ManageWP Worker <= 4.9.31 versions. | |
CVE-2026-39470 |
high | 7.2 | 0.0038 | 2026-10-29 | Shop manager Privilege Escalation in WooCommerce Cart Abandonment Recovery < 2.1.0 version | |
CVE-2026-39471 |
high | 7.2 | 0.0045 | 2026-10-29 | Author PHP Object Injection in ShortPixel Image Optimizer <= 6.4.3 versions. | |
CVE-2026-39472 |
high | 7.2 | 0.0045 | 2026-10-29 | Shop manager PHP Object Injection in WooCommerce PDF Invoices & Packing Slips < 5.9.0 vers | |
CVE-2026-39474 |
high | 8.8 | 0.0043 | 2026-10-29 | Contributor PHP Object Injection in Post Duplicator <= 3.0.10 versions. | |
CVE-2026-39478 |
high | 8.8 | 0.0043 | 2026-10-29 | Contributor PHP Object Injection in Anti-Malware Security and Brute-Force Firewall <= 4.23 | |
CVE-2026-39480 |
high | 7.5 | 0.0038 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in Backup Migration <= 2.1.1 versions. | |
CVE-2026-39481 |
high | 7.2 | 0.0045 | 2026-10-29 | Author PHP Object Injection in Modula Image Gallery <= 2.14.18 versions. |