Browse All CVEs
33,202 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-116853 |
medium | 6.5 | 0.0021 | 2026-10-30 | Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions. | |
CVE-2026-116854 |
medium | 6.5 | 0.0020 | 2026-10-30 | Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions. | |
CVE-2026-116847 |
high | 7.1 | 0.0019 | 2026-10-30 | Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions. | |
CVE-2026-116851 |
high | 7.1 | 0.0019 | 2026-10-30 | Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions. | |
CVE-2026-116405 |
high | 7.1 | 0.0019 | 2026-10-30 | Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions. | |
CVE-2026-116410 |
medium | 6.5 | 0.0021 | 2026-10-30 | Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions. | |
CVE-2026-116386 |
critical | 9.8 | 0.0035 | 2026-10-30 | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions. | |
CVE-2026-115604 |
medium | 5.0 | 0.0043 | 2026-10-30 | Subscriber Arbitrary File Deletion in SureDash <= 1.12.3 versions. | |
CVE-2026-115947 |
medium | 6.5 | 0.0022 | 2026-10-30 | Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions. | |
CVE-2026-114711 |
medium | 6.5 | 0.0024 | 2026-10-30 | Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions. | |
CVE-2026-59978 |
high | 7.5 | 0.0065 | 2026-10-30 | AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5. | |
CVE-2012-5605 |
low | 3.3 | 0.0032 | 2026-10-30 | A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows | |
CVE-2026-120007 |
medium | 6.9 | 0.0034 | 2026-10-30 | NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows un | |
CVE-2026-120046 |
medium | 6.0 | 0.0030 | 2026-10-30 | Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSenti | |
CVE-2026-119727 |
medium | 6.5 | 0.0025 | 2026-10-30 | A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a special | |
CVE-2026-119842 |
medium | 6.5 | 0.0033 | 2026-10-30 | A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing | |
CVE-2026-48382 |
critical | 10.0 | 0.0097 | 2026-10-30 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that coul | |
CVE-2026-101986 |
critical | 9.3 | 0.0055 | 2026-10-30 | An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos | |
CVE-2026-101990 |
critical | 9.3 | 0.0057 | 2026-10-30 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Junipe | |
CVE-2025-13204 |
critical | 9.8 | 0.0085 | 2026-10-30 | npm package `expr-eval` is vulnerable to Prototype Pollution. An attacker with access to e | |
CVE-2025-0750 |
medium | 6.6 | 0.0027 | 2026-10-30 | A vulnerability was found in CRI-O. A path traversal issue in the log management functions | |
CVE-2024-9341 |
high | 8.2 | 0.0103 | 2026-10-30 | A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may inco | |
CVE-2024-9676 |
medium | 6.5 | 0.0134 | 2026-10-30 | A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability | |
CVE-2013-1840 |
medium | 6.5 | 0.0172 | 2026-10-30 | A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerab | |
CVE-2023-4813 |
medium | 5.9 | 0.0193 | 2026-10-30 | 1 PoC | A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may |
CVE-2013-0266 |
medium | 5.5 | 0.0027 | 2026-10-30 | A flaw was found in the `puppetlabs-cinder` module, as used in PackStack. This vulnerabili | |
CVE-2013-1815 |
medium | 6.1 | 0.0045 | 2026-10-30 | A flaw was found in PackStack. This vulnerability allows a local user to modify deployed s | |
CVE-2012-5625 |
medium | 6.5 | 0.0135 | 2026-10-30 | OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM ba | |
CVE-2013-0261 |
high | 8.8 | 0.0034 | 2026-10-30 | A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary | |
CVE-2012-4574 |
medium | 5.5 | 0.0036 | 2026-10-30 | A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local | |
CVE-2012-5571 |
medium | 5.4 | 0.0205 | 2026-10-30 | A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated use | |
CVE-2012-3427 |
medium | 5.5 | 0.0034 | 2026-10-30 | A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Ima | |
CVE-2011-4346 |
medium | 4.6 | 0.0124 | 2026-10-30 | Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Sat | |
CVE-2012-0059 |
medium | 4.9 | 0.0167 | 2026-10-30 | A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs wh | |
CVE-2011-2927 |
medium | 5.4 | 0.0147 | 2026-10-30 | A flaw was found in Spacewalk and Red Hat Network Satellite. This vulnerability, known as | |
CVE-2011-3344 |
medium | 5.4 | 0.0154 | 2026-10-30 | A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) | |
CVE-2011-1594 |
medium | 6.5 | 0.0146 | 2026-10-30 | A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vu | |
CVE-2011-2920 |
medium | 5.5 | 0.0204 | 2026-10-30 | A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XS | |
CVE-2009-4139 |
medium | 6.8 | 0.0088 | 2026-10-30 | A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) v | |
CVE-2026-62122 |
medium | 5.3 | 0.0027 | 2026-10-30 | Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incor | |
CVE-2026-73322 |
— | — | 0.0018 | 2026-10-30 | Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. W | |
CVE-2026-62057 |
medium | 5.3 | 0.0030 | 2026-10-30 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-62121 |
medium | 6.5 | 0.0041 | 2026-10-30 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-62047 |
medium | 4.3 | 0.0026 | 2026-10-30 | Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets | |
CVE-2026-62056 |
medium | 5.3 | 0.0027 | 2026-10-30 | Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exp | |
CVE-2026-62019 |
medium | 4.3 | 0.0026 | 2026-10-30 | Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploit | |
CVE-2026-62023 |
medium | 4.3 | 0.0025 | 2026-10-30 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor | |
CVE-2026-39739 |
medium | 6.5 | 0.0020 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-52710 |
medium | 5.3 | 0.0030 | 2026-10-30 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-104674 |
medium | 4.3 | 0.0025 | 2026-10-30 | Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incor |