CVE Vulnerability Database
Search and browse 425,075 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-79899 | HIGH | 7.9 | — | Oct 1, 2026 | Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable... |
| CVE-2026-79898 | CRITICAL | 9.1 | — | Oct 1, 2026 | Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL... |
| CVE-2026-67106 | MEDIUM | 5.3 | 0.2% | Oct 1, 2026 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints r... |
| CVE-2026-67105 | HIGH | 7.4 | 0.2% | Oct 1, 2026 | HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with... |
| CVE-2026-67104 | MEDIUM | 5.3 | 0.2% | Oct 1, 2026 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticat... |
| CVE-2026-62073 | HIGH | 7.5 | 0.2% | Oct 1, 2026 | Unauthenticated Broken Access Control in WP Full Stripe Free <= 8.5.6 versions. |
| CVE-2026-62071 | CRITICAL | 9.3 | — | Oct 1, 2026 | Unauthenticated SQL Injection in WordPress File Upload <= 5.1.10 versions. |
| CVE-2026-56599 | LOW | 2.2 | 0.1% | Oct 1, 2026 | HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow... |
| CVE-2026-56589 | HIGH | 7.2 | 0.2% | Oct 1, 2026 | HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an att... |
| CVE-2026-103752 | CRITICAL | 9.8 | — | Oct 1, 2026 | Unauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions. |
| CVE-2026-103687 | HIGH | 7.3 | — | Oct 1, 2026 | A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the f... |
| CVE-2026-103347 | MEDIUM | 5.3 | — | Oct 1, 2026 | Unauthenticated Bypass Vulnerability in hCaptcha for WP <= 5.3.0 versions. |
| CVE-2026-103068 | HIGH | 8.8 | — | Oct 1, 2026 | Subscriber Privilege Escalation in ByteCoreStack – MCP Connector for AI Tools <= 1.2.2 versions. |
| CVE-2026-103004 | MEDIUM | 5.3 | 0.3% | Oct 1, 2026 | Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return valu... |
| CVE-2026-102378 | HIGH | 7.1 | — | Oct 1, 2026 | Unauthenticated Cross Site Scripting (XSS) in Parallax Section block <= 2.0.4 versions. |
| CVE-2026-100517 | HIGH | 7.5 | 0.3% | Oct 1, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in VillaTheme Photo Reviews for WooCommerce woo-photo-rev... |
| CVE-2026-100514 | HIGH | 7.5 | — | Oct 1, 2026 | Unauthenticated Insecure Direct Object References (IDOR) in REST API Log <= 1.7.2 versions. |
| CVE-2024-58388 | — | — | — | Oct 1, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2024-33605's description... |
| CVE-2026-79901 | CRITICAL | 9.9 | — | Oct 1, 2026 | In deployments using BoKS keytab management, affected versions of boks_keytabmd generate Active Directory service-accoun... |
| CVE-2026-66253 | LOW | 3.1 | 0.1% | Oct 1, 2026 | iControl is affected by a Session Timeout vulnerability, which could allow an attacker to exploit an unattended or aband... |
| CVE-2026-66249 | LOW | 3.1 | 0.1% | Oct 1, 2026 | iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies tra... |
| CVE-2026-66248 | LOW | 3.1 | 0.2% | Oct 1, 2026 | iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigg... |
| CVE-2026-66247 | MEDIUM | 4.3 | — | Oct 1, 2026 | iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malic... |
| CVE-2026-66246 | HIGH | 8.8 | — | Oct 1, 2026 | iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authenti... |
| CVE-2026-103686 | LOW | 3.5 | 0.4% | Oct 1, 2026 | A flaw has been found in rhukster dom-sanitizer up to 1.0.15. Impacted is the function DOMSanitizer::isDangerousUrl of t... |