Browse All CVEs
9,181 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-97860 |
medium | 6.7 | — | 2026-10-29 | YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unq | |
CVE-2026-109822 |
medium | 6.5 | — | 2026-10-29 | Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with in | |
CVE-2026-5702 |
medium | 4.8 | — | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an att | |
CVE-2026-5699 |
medium | 4.8 | — | 2026-10-29 | Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an att | |
CVE-2026-5700 |
medium | 4.8 | — | 2026-10-29 | Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an att | |
CVE-2026-5697 |
medium | 4.8 | — | 2026-10-29 | Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an att | |
CVE-2026-5698 |
medium | 4.8 | — | 2026-10-29 | Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an att | |
CVE-2026-27401 |
medium | 5.3 | — | 2026-10-29 | Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce y | |
CVE-2026-92086 |
medium | 5.3 | — | 2026-10-29 | The MW WP Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all | |
CVE-2026-109216 |
medium | 4.9 | — | 2026-10-29 | The Meta Box – A Framework for Dynamic Websites plugin for WordPress is vulnerable to Stor | |
CVE-2026-115962 |
medium | 4.3 | — | 2026-10-29 | Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Sp | |
CVE-2026-118989 |
medium | 5.1 | — | 2026-10-29 | WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side | |
CVE-2026-71569 |
medium | 4.8 | — | 2026-10-29 | Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component. This is | |
CVE-2026-91152 |
medium | 6.1 | — | 2026-10-29 | The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | |
CVE-2026-91153 |
medium | 5.3 | — | 2026-10-29 | The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | |
CVE-2026-116763 |
medium | 5.4 | — | 2026-10-29 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via | |
CVE-2026-118192 |
medium | 6.5 | — | 2026-10-29 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is | |
CVE-2026-110707 |
medium | 4.7 | — | 2026-10-29 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggr | |
CVE-2026-111318 |
medium | 5.4 | — | 2026-10-29 | The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPre | |
CVE-2026-109215 |
medium | 6.4 | — | 2026-10-29 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via | |
CVE-2026-107627 |
medium | 5.4 | — | 2026-10-29 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to S | |
CVE-2026-107629 |
medium | 5.4 | — | 2026-10-29 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to S | |
CVE-2026-103875 |
medium | 4.7 | — | 2026-10-29 | The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scr | |
CVE-2026-104727 |
medium | 6.4 | — | 2026-10-29 | The Sequential Order Numbers for WooCommerce plugin for WordPress is vulnerable to Stored | |
CVE-2026-103485 |
medium | 5.4 | — | 2026-10-29 | The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cros | |
CVE-2026-88941 |
medium | 6.2 | — | 2026-10-29 | Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky S | |
CVE-2026-7190 |
medium | 5.1 | — | 2026-10-29 | A cross-site scripting (XSS) vulnerability in the ICTBroadcast software, which affects the | |
CVE-2024-0340 |
medium | 4.4 | 0.0024 | 2026-10-29 | A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, w | |
CVE-2026-39991 |
medium | 4.8 | 0.0029 | 2026-10-29 | A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If | |
CVE-2026-97320 |
medium | 5.3 | 0.0025 | 2026-10-29 | A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected el | |
CVE-2026-97324 |
medium | 6.9 | 0.0028 | 2026-10-29 | A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affect | |
CVE-2026-118030 |
medium | 4.2 | — | 2026-10-29 | A flaw was found in the HOTP authentication mechanism of the keycloak-services component, | |
CVE-2026-117859 |
medium | 5.4 | — | 2026-10-29 | A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-se | |
CVE-2026-117627 |
medium | 5.4 | — | 2026-10-29 | A flaw was found in the JWT Authorization Grant implementation of the keycloak-services co | |
CVE-2026-117688 |
medium | 5.3 | — | 2026-10-29 | A flaw was found in the client registration component of Keycloak, an open-source identity | |
CVE-2026-117548 |
medium | 6.5 | — | 2026-10-29 | A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN | |
CVE-2026-108763 |
medium | 4.3 | — | 2026-10-29 | The Wallet System for WooCommerce WordPress plugin before 2.8.2 does not restrict its KYC | |
CVE-2026-110030 |
medium | 5.3 | — | 2026-10-29 | The Hide Price Until Login WordPress plugin before 1.1.2 does not restrict a guest-registr | |
CVE-2026-110504 |
medium | 6.8 | — | 2026-10-29 | The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not sanitize uploa | |
CVE-2026-110505 |
medium | 6.8 | — | 2026-10-29 | The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not prevent animat | |
CVE-2026-110983 |
medium | 4.3 | — | 2026-10-29 | The WP Photo Album Plus WordPress plugin before 9.3.04.004 does not verify the origin or a | |
CVE-2026-114270 |
medium | 5.3 | — | 2026-10-29 | The GeoDirectory WordPress plugin before 2.8.197 does not honour post password protection | |
CVE-2026-115259 |
medium | 4.9 | — | 2026-10-29 | The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.6.0 does not have | |
CVE-2026-115282 |
medium | 5.3 | — | 2026-10-29 | The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not perform an authorizatio | |
CVE-2026-115299 |
medium | 5.4 | — | 2026-10-29 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not verify a CSRF nonce | |
CVE-2026-115300 |
medium | 4.3 | — | 2026-10-29 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not validate a CSRF tok | |
CVE-2026-115302 |
medium | 5.3 | — | 2026-10-29 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not restrict access to | |
CVE-2026-19610 |
medium | 6.5 | — | 2026-10-29 | A flaw was found in the platform-mbean component of JBoss EAP, which provides management a | |
CVE-2026-78395 |
medium | 5.3 | — | 2026-10-29 | The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's o | |
CVE-2026-78396 |
medium | 5.3 | — | 2026-10-29 | The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belo |