Browse All CVEs
33,114 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-49002 |
critical | 9.1 | 0.0029 | 2026-10-29 | Access control failure means that an application does not effectively check user access pe | |
CVE-2026-8054 |
critical | 10.0 | 0.0158 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in th | |
CVE-2026-3012 |
medium | 6.8 | 0.0026 | 2026-10-29 | A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certif | |
CVE-2026-42725 |
medium | 6.5 | 0.0027 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in WP Wham Checkout Files U | |
CVE-2026-42726 |
medium | 6.5 | 0.0024 | 2026-10-29 | Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-c | |
CVE-2026-42727 |
critical | 9.3 | 0.0029 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-42728 |
high | 7.1 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42729 |
high | 7.1 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42730 |
high | 8.5 | 0.0026 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-42731 |
critical | 9.8 | 0.0033 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification min | |
CVE-2026-42733 |
high | 7.1 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42734 |
high | 7.1 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42735 |
high | 8.2 | 0.0026 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design Ki | |
CVE-2026-42736 |
high | 7.5 | 0.0026 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messa | |
CVE-2026-42737 |
high | 8.6 | 0.0036 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-42738 |
high | 7.1 | 0.0015 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42739 |
high | 7.1 | 0.0015 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42744 |
medium | 6.5 | 0.0021 | 2026-10-29 | Improper Validation of Specified Quantity in Input vulnerability in Ads by WPQuads Ads by | |
CVE-2026-42745 |
high | 7.3 | 0.0024 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart On | |
CVE-2026-42746 |
high | 7.3 | 0.0019 | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Or | |
CVE-2026-42747 |
critical | 9.3 | 0.0024 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-42748 |
critical | 9.9 | 0.0028 | 2026-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpi | |
CVE-2026-42749 |
high | 7.1 | 0.0025 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeisle Disabl | |
CVE-2026-42750 |
medium | 6.5 | 0.0013 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42751 |
medium | 6.5 | 0.0013 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42753 |
high | 7.3 | 0.0018 | 2026-10-29 | Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership | |
CVE-2026-42754 |
high | 7.1 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42755 |
critical | 9.3 | 0.0024 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-42756 |
critical | 9.9 | 0.0034 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-42757 |
critical | 9.9 | 0.0036 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-42758 |
critical | 9.8 | 0.0032 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in Saleswonder Team: Tobias WebinarIgnition w | |
CVE-2026-42759 |
high | 7.1 | 0.0015 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42760 |
high | 7.5 | 0.0029 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup a | |
CVE-2026-42761 |
critical | 9.3 | 0.0023 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-42762 |
high | 7.1 | 0.0014 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-9689 |
medium | 4.2 | 0.0032 | 2026-10-29 | A flaw was found in Keycloak, an open-source identity and access management solution. When | |
CVE-2024-28765 |
medium | 5.3 | 0.0039 | 2026-10-29 | IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10 | |
CVE-2025-71312 |
medium | 5.5 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix ntfs_mo | |
CVE-2026-1718 |
high | 7.5 | 0.0036 | 2026-10-29 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of serv | |
CVE-2026-1933 |
medium | 6.5 | 0.0086 | 2026-10-29 | A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured wit | |
CVE-2026-2607 |
medium | 5.1 | 0.0013 | 2026-10-29 | IBM MQ Operator SC2: v3.2.0 through 3.2.23CD: v3.3.0, v3.4.0, v3.4.1, v3.5.0, v3.5.1 - v3 | |
CVE-2026-35087 |
critical | 9.3 | 0.0066 | 2026-10-29 | Slican telephone exchanges allow administrative protocol authentication bypass. An attacke | |
CVE-2026-35089 |
high | 8.7 | 0.0059 | 2026-10-29 | In Slican telephone exchanges secure key is generated in a predictable manner using proper | |
CVE-2026-35090 |
critical | 9.3 | 0.0063 | 2026-10-29 | In Slican telephone exchanges it is possible to manage the control panel remotely. An unau | |
CVE-2026-36045 |
high | 7.3 | 0.0144 | 2026-10-29 | picoclaw <=v0.1.2 and earlier is vulnerable to OS command injection via the ExecTool compo | |
CVE-2026-38426 |
high | 7.3 | 0.0061 | 2026-10-29 | Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote att | |
CVE-2026-3366 |
high | 7.5 | 0.0060 | 2026-10-29 | IBM InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2. | |
CVE-2026-3623 |
high | 7.8 | 0.0015 | 2026-10-29 | IBM Netezza Performance Server Replication Services 3.0.2.0 through 3.0.5.0 allows an atta | |
CVE-2026-3676 |
medium | 6.5 | 0.0040 | 2026-10-29 | IBM Cloud APM, Base Private 8.1.4 and IBM Cloud APM, Advanced Private 8.1.4 IBM Db2 for Li | |
CVE-2026-42789 |
high | 7.0 | 0.0038 | 2026-10-29 | Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_ke |