CVE Vulnerability Database
Search and browse 375,689 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-14859 | — | — | — | Aug 12, 2026 | The WP Crowdfunding WordPress plugin before 2.2.1 does not check the campaign-submission capability in one of its AJAX a... |
| CVE-2026-14858 | — | — | — | Aug 12, 2026 | The WP Crowdfunding WordPress plugin before 2.2.1 does not verify order ownership before returning order details, allowi... |
| CVE-2026-14857 | — | — | — | Aug 12, 2026 | The WP Crowdfunding WordPress plugin before 2.2.1 does not verify ownership of a campaign before allowing its update his... |
| CVE-2026-13613 | — | — | — | Aug 12, 2026 | The KiviCare WordPress plugin before 4.5.2 does not properly sanitise and escape user-supplied parameters before using ... |
| CVE-2026-13612 | — | — | — | Aug 12, 2026 | The KiviCare WordPress plugin before 4.5.2 does not verify that the requesting user owns the records being accessed, al... |
| CVE-2026-13177 | — | — | — | Aug 12, 2026 | The Eventin WordPress plugin before 4.1.20 does not properly restrict access to individual order records, allowing user... |
| CVE-2026-13171 | — | — | — | Aug 12, 2026 | The Eventin WordPress plugin before 4.1.20 does not perform an authorization check on its waiting-list registration han... |
| CVE-2026-13168 | — | — | — | Aug 12, 2026 | The Eventin WordPress plugin before 4.1.20 does not properly restrict access to stored customer records, allowing users... |
| CVE-2026-12976 | — | — | — | Aug 12, 2026 | The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-a... |
| CVE-2026-64954 | HIGH | 8.2 | — | Aug 12, 2026 | Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, th... |
| CVE-2026-12235 | MEDIUM | 6.3 | — | Aug 12, 2026 | The Linkable Loadable Extensions (llext) subsystem mis-handles PLT/RELA relocation entries when linking a relocatable (p... |
| CVE-2026-12234 | HIGH | 7.8 | — | Aug 12, 2026 | The userspace syscall verifiers z_vrfy_zsock_sendmsg() and z_vrfy_zsock_recvmsg() in subsys/net/lib/sockets/sockets.c sn... |
| CVE-2026-12233 | MEDIUM | 5.9 | — | Aug 12, 2026 | The PSA Protected Storage credential backend (subsys/net/lib/tls_credentials/tls_credentials_trusted.c) declared its cre... |
| CVE-2026-12232 | MEDIUM | 6.1 | — | Aug 12, 2026 | The Intel ALH digital-audio-interface driver function dai_alh_get_properties() in drivers/dai/intel/alh/alh.c used a cal... |
| CVE-2025-15687 | MEDIUM | 4.3 | — | Aug 12, 2026 | A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smf_gx_cca_cb of the component SMF ... |
| CVE-2026-9318 | MEDIUM | 5.4 | 0.2% | Aug 12, 2026 | tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows... |
| CVE-2026-19588 | MEDIUM | 6.5 | — | Aug 12, 2026 | Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers. |
| CVE-2026-19587 | MEDIUM | 6.5 | — | Aug 12, 2026 | Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation. |
| CVE-2026-18961 | HIGH | 8.1 | 0.5% | Aug 12, 2026 | The Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect plugin for WordPress is vulnera... |
| CVE-2025-15686 | MEDIUM | 4.3 | 0.5% | Aug 12, 2026 | A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fd_msg_sess_get of the com... |
| CVE-2025-15685 | MEDIUM | 6.3 | — | Aug 12, 2026 | A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the componen... |
| CVE-2025-15684 | MEDIUM | 5.3 | — | Aug 12, 2026 | A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diam_log_func of the file lib/diameter/com... |
| CVE-2026-73122 | HIGH | 7.7 | 0.2% | Aug 12, 2026 | A flaw was found in the multicloud-operators-channel component of Red Hat Advanced Cluster Management (RHACM). This vuln... |
| CVE-2026-72526 | CRITICAL | 9.9 | — | Aug 12, 2026 | A flaw was found in the multicloud-integrations component. The Application propagation controller processes the `ocm-man... |
| CVE-2026-70398 | CRITICAL | 9.6 | — | Aug 12, 2026 | A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerabil... |