CVE Vulnerability Database
Search and browse 425,067 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-94633 | HIGH | 8.7 | — | Oct 2, 2026 | Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache... |
| CVE-2026-93926 | HIGH | 8.7 | — | Oct 2, 2026 | Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulnerability i... |
| CVE-2026-93925 | HIGH | 8.7 | — | Oct 2, 2026 | Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. T... |
| CVE-2026-91137 | HIGH | 8.7 | — | Oct 2, 2026 | Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iter... |
| CVE-2026-91135 | CRITICAL | 9.2 | — | Oct 2, 2026 | Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB ... |
| CVE-2026-86326 | HIGH | 8.6 | — | Oct 2, 2026 | An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does no... |
| CVE-2026-86325 | CRITICAL | 9.4 | — | Oct 2, 2026 | A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability... |
| CVE-2026-85494 | HIGH | 7.5 | 0.4% | Oct 2, 2026 | Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allo... |
| CVE-2026-85493 | HIGH | 8.7 | — | Oct 2, 2026 | Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affects Apache Thrift: be... |
| CVE-2026-85483 | MEDIUM | 6.3 | — | Oct 2, 2026 | Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. This issue... |
| CVE-2026-59668 | MEDIUM | 4.8 | — | Oct 2, 2026 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow... |
| CVE-2026-59667 | MEDIUM | 4.8 | — | Oct 2, 2026 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow... |
| CVE-2026-59666 | MEDIUM | 4.8 | — | Oct 2, 2026 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow... |
| CVE-2026-104606 | MEDIUM | 6.3 | — | Oct 2, 2026 | A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unkn... |
| CVE-2026-97652 | MEDIUM | 6.1 | 0.3% | Oct 2, 2026 | The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Reflecte... |
| CVE-2026-95662 | MEDIUM | 4.8 | 0.4% | Oct 2, 2026 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow... |
| CVE-2026-94639 | HIGH | 8.2 | 0.4% | Oct 2, 2026 | improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception vu... |
| CVE-2026-94635 | HIGH | 8.7 | 0.4% | Oct 2, 2026 | Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability ... |
| CVE-2026-94634 | HIGH | 8.2 | — | Oct 2, 2026 | Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerabilit... |
| CVE-2026-94541 | CRITICAL | 9.8 | 0.5% | Oct 2, 2026 | The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all version... |
| CVE-2026-94405 | MEDIUM | 5.3 | — | Oct 2, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Shahjada Download Manager allows Retrieve Embedded Sen... |
| CVE-2026-94180 | MEDIUM | 4.3 | 0.3% | Oct 2, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sen... |
| CVE-2026-87920 | HIGH | 7.2 | 0.2% | Oct 2, 2026 | The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output-Buff... |
| CVE-2026-85492 | MEDIUM | 6.1 | 0.2% | Oct 2, 2026 | The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin fo... |
| CVE-2026-80298 | HIGH | 8.8 | 0.4% | Oct 2, 2026 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef ... |