CVE Vulnerability Database
Search and browse 425,069 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-63571 | HIGH | 7.5 | 0.2% | Oct 2, 2026 | Improper verification of cryptographic signature in the attribute certificate path validator (PkixAttrCertPathValidator,... |
| CVE-2026-63570 | HIGH | 7.5 | 0.2% | Oct 2, 2026 | Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp be... |
| CVE-2026-18036 | HIGH | 8.2 | 0.3% | Oct 2, 2026 | In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference i... |
| CVE-2026-17508 | MEDIUM | 5.3 | 0.4% | Oct 2, 2026 | In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost paramete... |
| CVE-2026-17507 | HIGH | 7.5 | 0.3% | Oct 2, 2026 | In Bouncy Castle for Java before 1.86, the MLS implementation (org.bouncycastle.mls) holds RFC 9420's uint32 leaf_index ... |
| CVE-2026-12951 | MEDIUM | 6.5 | 0.3% | Oct 2, 2026 | The Dc Woocommerce Multi Vendor plugin for WordPress is vulnerable to SQL Injection via the 'order_by' parameter of the ... |
| CVE-2026-103604 | HIGH | 7.5 | 0.3% | Oct 2, 2026 | Inefficient algorithmic complexity in X.509 distinguished name string conversion (X509Name.ToString and IetfUtilities.Va... |
| CVE-2026-103603 | HIGH | 7.5 | 0.5% | Oct 2, 2026 | Memory allocation with excessive size value in the HSS/LMS signature code (HssPublicKeyParameters, HssSignature) in Legi... |
| CVE-2026-103602 | MEDIUM | 5.3 | 0.3% | Oct 2, 2026 | Improper certificate validation in PkixNameConstraintValidator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.... |
| CVE-2026-103601 | HIGH | 7.5 | 0.3% | Oct 2, 2026 | Release of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (KCcmBlockCipher) AEAD modes in Legion of ... |
| CVE-2026-103600 | HIGH | 7.5 | 0.3% | Oct 2, 2026 | Uncontrolled recursion in the ASN.1 parser (Asn1InputStream, Asn1StreamParser) in Legion of the Bouncy Castle Inc. bc-cs... |
| CVE-2026-103426 | HIGH | 7.2 | 0.2% | Oct 2, 2026 | The Relevanssi Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_rt' parameter in all ... |
| CVE-2026-102772 | HIGH | 7.2 | 0.3% | Oct 2, 2026 | The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<textarea_code field id> (e.g. kl_co... |
| CVE-2026-102002 | LOW | 3.1 | 0.3% | Oct 2, 2026 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Sensi... |
| CVE-2026-100182 | HIGH | 7.2 | 0.3% | Oct 2, 2026 | The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Origin postMessage to A... |
| CVE-2026-100107 | HIGH | 7.2 | 0.3% | Oct 2, 2026 | The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter ... |
| CVE-2026-97219 | MEDIUM | 4.3 | 0.2% | Oct 2, 2026 | The MStore API WordPress plugin before 4.22.1 does not restrict which fields of an order a customer may update, allowing... |
| CVE-2026-93698 | CRITICAL | 9.9 | 0.5% | Oct 2, 2026 | Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin. |
| CVE-2026-93697 | CRITICAL | 9 | 0.4% | Oct 2, 2026 | There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface. |
| CVE-2026-93029 | CRITICAL | 9 | 0.4% | Oct 2, 2026 | There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface. |
| CVE-2026-92924 | MEDIUM | 5.4 | 0.2% | Oct 2, 2026 | The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not check that a request to render widget outpu... |
| CVE-2026-91020 | MEDIUM | 5.3 | 0.3% | Oct 2, 2026 | The WebToffee Gift Cards for WooCommerce WordPress plugin before 1.3.1 does not validate a user-supplied gift card amoun... |
| CVE-2026-90987 | MEDIUM | 5.3 | 0.2% | Oct 2, 2026 | The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, ... |
| CVE-2026-90952 | MEDIUM | 5.3 | 0.2% | Oct 2, 2026 | The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the Wo... |
| CVE-2026-85005 | MEDIUM | 5.4 | 0.2% | Oct 2, 2026 | The Popup Maker WP WordPress plugin through 1.4.5 does not perform authorization checks on several of its actions and ex... |