Browse All CVEs
33,203 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-105894 |
high | 8.8 | 0.0032 | 2026-10-30 | The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordP | |
CVE-2026-107630 |
high | 7.5 | 0.0051 | 2026-10-30 | The Email Templates Customizer and Designer for WordPress and WooCommerce plugin for WordP | |
CVE-2026-104739 |
medium | 4.9 | 0.0079 | 2026-10-30 | The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerabl | |
CVE-2026-104744 |
high | 7.2 | 0.0028 | 2026-10-30 | The Independent Analytics Pro plugin for WordPress is vulnerable to Stored Cross-Site Scri | |
CVE-2026-102918 |
medium | 6.4 | 0.0031 | 2026-10-30 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting in a | |
CVE-2025-8574 |
high | 8.7 | 0.0037 | 2026-10-30 | The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all | |
CVE-2026-93291 |
critical | 9.3 | 0.0024 | 2026-10-30 | Omni C20 lacks proper certificate validation which could allow an attacker to perform a ma | |
CVE-2026-110533 |
medium | 6.4 | 0.0032 | 2026-10-30 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scr | |
CVE-2026-102905 |
medium | 6.5 | 0.0042 | 2026-10-30 | The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbit | |
CVE-2026-69446 |
medium | 4.4 | 0.0025 | 2026-10-30 | Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker t | |
CVE-2026-119763 |
medium | 6.9 | 0.0049 | 2026-10-30 | changelog.com before commit 7b35e829 contains a missing authorization vulnerability that a | |
CVE-2026-119764 |
high | 7.4 | 0.0032 | 2026-10-30 | Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that a | |
CVE-2026-119761 |
medium | 5.3 | 0.0032 | 2026-10-30 | Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-site scriptin | |
CVE-2026-119762 |
high | 8.7 | 0.0051 | 2026-10-30 | Axigen Mail Server before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 contain | |
CVE-2026-63964 |
medium | 5.5 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg | |
CVE-2026-63965 |
medium | 5.5 | 0.0015 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280 | |
CVE-2026-63966 |
medium | 5.5 | 0.0015 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16550: | |
CVE-2026-63967 |
high | 7.8 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: | |
CVE-2026-63968 |
high | 7.5 | 0.0066 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible in | |
CVE-2026-15555 |
high | 8.8 | 0.0095 | 2026-10-30 | A flaw was found in JBoss marshalling. The Infinispan session replication path deserialize | |
CVE-2026-93289 |
critical | 9.0 | 0.0077 | 2026-10-30 | The affected products are vulnerable to command injection attack that could allow an unaut | |
CVE-2026-37468 |
— | — | 0.0021 | 2026-10-30 | Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote | |
CVE-2026-50000 |
medium | 5.0 | 0.0036 | 2026-10-30 | SecureDrop is an open-source whistleblower submission system that media organizations can | |
CVE-2026-61804 |
high | 8.1 | 0.0028 | 2026-10-30 | myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, `Pro | |
CVE-2026-61805 |
medium | 5.3 | 0.0022 | 2026-10-30 | Frappe Learning Management System (LMS) is a learning system that helps users structure th | |
CVE-2026-61806 |
medium | 5.3 | 0.0024 | 2026-10-30 | Frappe Learning Management System (LMS) is a learning system that helps users structure th | |
CVE-2026-61826 |
critical | 10.0 | 0.0026 | 2026-10-30 | Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_n | |
CVE-2026-119760 |
high | 8.7 | 0.0048 | 2026-10-30 | sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel( | |
CVE-2026-39910 |
high | 7.7 | 0.0025 | 2026-10-30 | STACKIT IaaS API contains a missing authorization check in the PUT servers service-account | |
CVE-2026-108764 |
medium | 6.5 | 0.0022 | 2026-10-30 | Server-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin | |
CVE-2026-108766 |
medium | 6.5 | 0.0022 | 2026-10-30 | Missing authorization on jdbc source config update in Apache Kylin. Impact most to the kyl | |
CVE-2026-108762 |
high | 7.3 | 0.0032 | 2026-10-30 | Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to th | |
CVE-2026-119300 |
medium | 6.5 | 0.0029 | 2026-10-30 | Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication | |
CVE-2026-86589 |
medium | 5.4 | 0.0025 | 2026-10-30 | Incorrect implementation of authentication algorithm vulnerability in Apache Answer. Th | |
CVE-2026-108780 |
medium | 6.5 | 0.0023 | 2026-10-30 | Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact i | |
CVE-2026-108771 |
critical | 9.8 | 0.0047 | 2026-10-30 | Missing authentication for in-house broadcast and polymorphic deserialization vulnerabilit | |
CVE-2026-108776 |
medium | 5.3 | 0.0027 | 2026-10-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2012-5562 |
low | 3.3 | 0.0102 | 2026-10-30 | A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user | |
CVE-2013-2056 |
high | 7.5 | 0.0262 | 2026-10-30 | A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, w | |
CVE-2006-4339 |
critical | 9.1 | 0.0395 | 2026-10-30 | A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL im | |
CVE-2026-77884 |
high | 7.1 | 0.0027 | 2026-10-30 | Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachab | |
CVE-2026-112816 |
critical | 10.0 | 0.0030 | 2026-10-30 | Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.2 | |
CVE-2024-11218 |
high | 8.6 | 0.0037 | 2026-10-30 | A vulnerability was found in `podman build` and `buildah.` This issue occurs in a containe | |
CVE-2024-9675 |
medium | 4.4 | 0.0039 | 2026-10-30 | A vulnerability was found in Buildah. Cache mounts do not properly validate that user-spec | |
CVE-2026-55551 |
medium | 6.5 | 0.0026 | 2026-10-30 | ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case man | |
CVE-2026-61803 |
medium | 5.3 | 0.0023 | 2026-10-30 | Frappe Learning Management System (LMS) is a learning system that helps users structure th | |
CVE-2026-39375 |
medium | 5.1 | 0.0035 | 2026-10-30 | Frappe Learning Management System (LMS) is a learning system that helps users structure th | |
CVE-2024-7557 |
high | 8.8 | 0.0098 | 2026-10-30 | A vulnerability was found in OpenShift AI that allows for authentication bypass and privil | |
CVE-2025-66208 |
high | 7.2 | 0.0183 | 2026-10-30 | Collabora Online - Built-in CODE Server (richdocumentscode) provides a built-in server wit | |
CVE-2026-8374 |
high | 8.5 | 0.0009 | 2026-10-30 | Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allow |