Browse All CVEs
11,461 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-103665 |
high | 7.8 | — | 2026-10-29 | The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecu | |
CVE-2026-119028 |
high | 8.7 | — | 2026-10-29 | oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attack | |
CVE-2026-119027 |
high | 7.7 | — | 2026-10-29 | oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attack | |
CVE-2026-96767 |
high | 7.2 | — | 2026-10-29 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to | |
CVE-2026-115821 |
high | 7.2 | — | 2026-10-29 | The NewsmanApp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' | |
CVE-2026-119025 |
high | 7.7 | — | 2026-10-29 | open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attack | |
CVE-2026-110184 |
high | 7.5 | — | 2026-10-29 | The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the 'slug' para | |
CVE-2026-112827 |
high | 7.1 | — | 2026-10-29 | Missing Authorization vulnerability in VillaTheme HANDMADE – Dropshipping for Etsy and Woo | |
CVE-2026-114193 |
high | 7.5 | — | 2026-10-29 | Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Exp | |
CVE-2026-115592 |
high | 7.1 | — | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115599 |
high | 7.5 | — | 2026-10-29 | Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting I | |
CVE-2026-115611 |
high | 7.1 | — | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115963 |
high | 7.1 | — | 2026-10-29 | Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper- | |
CVE-2026-115965 |
high | 8.5 | — | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-115967 |
high | 8.8 | — | 2026-10-29 | Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone | |
CVE-2026-116409 |
high | 7.1 | — | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-118984 |
high | 7.0 | — | 2026-10-29 | OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that al | |
CVE-2026-33923 |
high | 7.5 | — | 2026-10-29 | A signature verification vulnerability was discovered in the update installation functiona | |
CVE-2026-33924 |
high | 7.5 | — | 2026-10-29 | Two OS command injection vulnerabilities were discovered in the update installation functi | |
CVE-2026-107743 |
high | 7.2 | — | 2026-10-29 | The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in v | |
CVE-2026-96889 |
high | 7.8 | 0.0053 | 2026-10-29 | 5 PoC | A flaw was found in librsvg. When processing an SVG document containing nested XML inclusi |
CVE-2026-117611 |
high | 7.1 | — | 2026-10-29 | Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL) | |
CVE-2026-111418 |
high | 7.5 | — | 2026-10-29 | A server-side request forgery (SSRF) vulnerability exists in the Foxit official website’s | |
CVE-2026-111419 |
high | 8.6 | — | 2026-10-29 | A sensitive information exposure vulnerability exists on the Foxit official website becaus | |
CVE-2026-111417 |
high | 7.5 | — | 2026-10-29 | A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF c | |
CVE-2025-62841 |
high | 8.7 | — | 2026-10-29 | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hyb | |
CVE-2025-62839 |
high | 8.7 | — | 2026-10-29 | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hyb | |
CVE-2024-3056 |
high | 7.7 | 0.0054 | 2026-10-29 | A flaw was found in Podman. This issue may allow an attacker to create a specially crafted | |
CVE-2024-1394 |
high | 7.5 | 0.0153 | 2026-10-29 | A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might | |
CVE-2026-111739 |
high | 7.5 | — | 2026-10-29 | The Two Factor Authentication WordPress plugin before 1.17.0, All-In-One Security (AIOS) | |
CVE-2026-114488 |
high | 7.4 | — | 2026-10-29 | A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invoc | |
CVE-2026-115301 |
high | 7.2 | — | 2026-10-29 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not sandbox the templat | |
CVE-2026-15564 |
high | 7.4 | — | 2026-10-29 | Wildfly's IIOP listener may permit deserialization of input streams before authentication | |
CVE-2026-86794 |
high | 8.8 | — | 2026-10-29 | The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce ch | |
CVE-2026-89216 |
high | 8.6 | — | 2026-10-29 | The vTables WordPress plugin before 0.3 does not properly sanitise and escape a parameter | |
CVE-2026-118905 |
high | 7.1 | — | 2026-10-29 | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node. | |
CVE-2023-6270 |
high | 7.0 | 0.0041 | 2026-10-29 | A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg | |
CVE-2026-87853 |
high | 7.5 | 0.0033 | 2026-10-29 | A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() functi | |
CVE-2023-3397 |
high | 7.0 | 0.0021 | 2026-10-29 | A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux | |
CVE-2026-42013 |
high | 8.2 | 0.0042 | 2026-10-29 | A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative | |
CVE-2026-42012 |
high | 7.1 | 0.0035 | 2026-10-29 | A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenti | |
CVE-2026-93757 |
high | 7.5 | — | 2026-10-29 | The Wild Apricot Login plugin for WordPress is vulnerable to Authentication Bypass via SSO | |
CVE-2026-93855 |
high | 7.5 | — | 2026-10-29 | The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection v | |
CVE-2026-93904 |
high | 7.5 | — | 2026-10-29 | The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPr | |
CVE-2026-96228 |
high | 8.1 | — | 2026-10-29 | SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all | |
CVE-2026-96666 |
high | 7.2 | — | 2026-10-29 | The Schema App Structured Data plugin for WordPress is vulnerable to Stored Cross-Site Scr | |
CVE-2026-96669 |
high | 7.2 | — | 2026-10-29 | The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Store | |
CVE-2026-96741 |
high | 7.2 | — | 2026-10-29 | The DSGVO All in one for WP plugin for WordPress is vulnerable to Stored Cross-Site Script | |
CVE-2026-74047 |
high | 7.1 | 0.0032 | 2026-10-29 | Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allow | |
CVE-2026-74043 |
high | 8.5 | 0.0036 | 2026-10-29 | Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload_list_file |