Browse All CVEs
11,727 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-42693 |
high | 7.1 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-101974 |
high | 7.1 | 0.0025 | 2026-10-29 | An Improper Validation of Specified Quantity in Input vulnerability in rpd of Juniper Netw | |
CVE-2026-101987 |
high | 7.1 | 0.0027 | 2026-10-29 | An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon | |
CVE-2026-97860 |
high | 8.4 | — | 2026-10-29 | YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unq | |
CVE-2026-103665 |
high | 8.4 | — | 2026-10-29 | The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecu | |
CVE-2026-109822 |
high | 7.1 | — | 2026-10-29 | Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with in | |
CVE-2026-119028 |
high | 8.7 | — | 2026-10-29 | oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attack | |
CVE-2026-119027 |
high | 7.7 | — | 2026-10-29 | oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attack | |
CVE-2026-96767 |
high | 7.2 | — | 2026-10-29 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to | |
CVE-2026-115821 |
high | 7.2 | — | 2026-10-29 | The NewsmanApp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' | |
CVE-2026-119025 |
high | 7.7 | — | 2026-10-29 | open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attack | |
CVE-2026-110184 |
high | 7.5 | — | 2026-10-29 | The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the 'slug' para | |
CVE-2026-112827 |
high | 7.1 | — | 2026-10-29 | Missing Authorization vulnerability in VillaTheme HANDMADE – Dropshipping for Etsy and Woo | |
CVE-2026-114193 |
high | 7.5 | — | 2026-10-29 | Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Exp | |
CVE-2026-115592 |
high | 7.1 | — | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115599 |
high | 7.5 | — | 2026-10-29 | Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting I | |
CVE-2026-115611 |
high | 7.1 | — | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115963 |
high | 7.1 | — | 2026-10-29 | Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper- | |
CVE-2026-115965 |
high | 8.5 | — | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-115967 |
high | 8.8 | — | 2026-10-29 | Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone | |
CVE-2026-116409 |
high | 7.1 | — | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-118984 |
high | 7.0 | — | 2026-10-29 | OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that al | |
CVE-2026-33923 |
high | 7.5 | — | 2026-10-29 | A signature verification vulnerability was discovered in the update installation functiona | |
CVE-2026-33924 |
high | 7.5 | — | 2026-10-29 | Two OS command injection vulnerabilities were discovered in the update installation functi | |
CVE-2026-107743 |
high | 7.2 | 0.0040 | 2026-10-29 | The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in v | |
CVE-2026-96889 |
high | 7.8 | 0.0054 | 2026-10-29 | 5 PoC | A flaw was found in librsvg. When processing an SVG document containing nested XML inclusi |
CVE-2026-117611 |
high | 7.1 | 0.0033 | 2026-10-29 | Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL) | |
CVE-2026-111418 |
high | 7.5 | 0.0043 | 2026-10-29 | A server-side request forgery (SSRF) vulnerability exists in the Foxit official website’s | |
CVE-2026-111419 |
high | 8.6 | 0.0043 | 2026-10-29 | A sensitive information exposure vulnerability exists on the Foxit official website becaus | |
CVE-2026-111417 |
high | 7.5 | 0.0043 | 2026-10-29 | A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF c | |
CVE-2025-62841 |
high | 8.7 | 0.0024 | 2026-10-29 | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hyb | |
CVE-2025-62839 |
high | 8.7 | 0.0024 | 2026-10-29 | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hyb | |
CVE-2024-3056 |
high | 7.7 | 0.0053 | 2026-10-29 | A flaw was found in Podman. This issue may allow an attacker to create a specially crafted | |
CVE-2024-1394 |
high | 7.5 | 0.0153 | 2026-10-29 | A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might | |
CVE-2026-111739 |
high | 7.5 | 0.0018 | 2026-10-29 | The Two Factor Authentication WordPress plugin before 1.17.0, All-In-One Security (AIOS) | |
CVE-2026-114488 |
high | 7.4 | 0.0034 | 2026-10-29 | A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invoc | |
CVE-2026-115301 |
high | 7.2 | 0.0025 | 2026-10-29 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not sandbox the templat | |
CVE-2026-15564 |
high | 7.4 | 0.0012 | 2026-10-29 | Wildfly's IIOP listener may permit deserialization of input streams before authentication | |
CVE-2026-86794 |
high | 8.8 | 0.0017 | 2026-10-29 | The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce ch | |
CVE-2026-89216 |
high | 8.6 | 0.0019 | 2026-10-29 | The vTables WordPress plugin before 0.3 does not properly sanitise and escape a parameter | |
CVE-2026-118905 |
high | 7.1 | 0.0014 | 2026-10-29 | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node. | |
CVE-2023-6270 |
high | 7.0 | 0.0041 | 2026-10-29 | A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg | |
CVE-2026-87853 |
high | 7.5 | 0.0033 | 2026-10-29 | A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() functi | |
CVE-2023-3397 |
high | 7.0 | 0.0021 | 2026-10-29 | A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux | |
CVE-2026-42013 |
high | 8.2 | 0.0042 | 2026-10-29 | A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative | |
CVE-2026-42012 |
high | 7.1 | 0.0035 | 2026-10-29 | A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenti | |
CVE-2026-93757 |
high | 7.5 | 0.0043 | 2026-10-29 | The Wild Apricot Login plugin for WordPress is vulnerable to Authentication Bypass via SSO | |
CVE-2026-93855 |
high | 7.5 | 0.0041 | 2026-10-29 | The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection v | |
CVE-2026-93904 |
high | 7.5 | 0.0046 | 2026-10-29 | The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPr | |
CVE-2026-96228 |
high | 8.1 | 0.0047 | 2026-10-29 | SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all |