Browse All CVEs
46,677 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-40842 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40843 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40844 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40845 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40846 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40847 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40848 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40849 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40850 |
high | 8.7 | 0.0040 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil | |
CVE-2026-40851 |
high | 8.4 | 0.0013 | 2026-10-29 | A local attacker can perform a confusion attack on the cfgparser via a specially crafted f | |
CVE-2026-40852 |
high | 7.2 | 0.0037 | 2026-10-29 | A highly authenticated attacker can alter the config generator injecting a payload into fu | |
CVE-2026-48877 |
medium | 6.5 | 0.0030 | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in Tom GenerateBlocks allo | |
CVE-2026-48968 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-49002 |
critical | 9.1 | 0.0029 | 2026-10-29 | Access control failure means that an application does not effectively check user access pe | |
CVE-2026-8054 |
critical | 10.0 | 0.0158 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in th | |
CVE-2026-3012 |
medium | 6.8 | 0.0026 | 2026-10-29 | A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certif | |
CVE-2026-42725 |
medium | 6.5 | 0.0027 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in WP Wham Checkout Files U | |
CVE-2026-42726 |
medium | 6.5 | 0.0024 | 2026-10-29 | Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-c | |
CVE-2026-42727 |
critical | 9.3 | 0.0029 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-42728 |
high | 7.1 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42729 |
high | 7.1 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42730 |
high | 8.5 | 0.0026 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-42731 |
critical | 9.8 | 0.0033 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification min | |
CVE-2026-42733 |
high | 7.1 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42734 |
high | 7.1 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42735 |
high | 8.2 | 0.0026 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design Ki | |
CVE-2026-42736 |
high | 7.5 | 0.0026 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messa | |
CVE-2026-42737 |
high | 8.6 | 0.0036 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-42738 |
high | 7.1 | 0.0015 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42739 |
high | 7.1 | 0.0015 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42744 |
medium | 6.5 | 0.0021 | 2026-10-29 | Improper Validation of Specified Quantity in Input vulnerability in Ads by WPQuads Ads by | |
CVE-2026-42745 |
high | 7.3 | 0.0024 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart On | |
CVE-2026-42746 |
high | 7.3 | 0.0019 | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Or | |
CVE-2026-42747 |
critical | 9.3 | 0.0024 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-42748 |
critical | 9.9 | 0.0028 | 2026-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpi | |
CVE-2026-42749 |
high | 7.1 | 0.0025 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeisle Disabl | |
CVE-2026-42750 |
medium | 6.5 | 0.0013 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42751 |
medium | 6.5 | 0.0013 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42753 |
high | 7.3 | 0.0018 | 2026-10-29 | Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership | |
CVE-2026-42754 |
high | 7.1 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42755 |
critical | 9.3 | 0.0024 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-42756 |
critical | 9.9 | 0.0034 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-42757 |
critical | 9.9 | 0.0036 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-42758 |
critical | 9.8 | 0.0032 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in Saleswonder Team: Tobias WebinarIgnition w | |
CVE-2026-42759 |
high | 7.1 | 0.0015 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42760 |
high | 7.5 | 0.0029 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup a | |
CVE-2026-42761 |
critical | 9.3 | 0.0023 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-42762 |
high | 7.1 | 0.0014 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-9689 |
medium | 4.2 | 0.0032 | 2026-10-29 | A flaw was found in Keycloak, an open-source identity and access management solution. When | |
CVE-2024-28765 |
medium | 5.3 | 0.0039 | 2026-10-29 | IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10 |