CVE Vulnerability Database
Search and browse 425,079 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-82828 | HIGH | 8.8 | — | Oct 1, 2026 | Hitachi Coding Software Suite contains an Incorrect Authorization vulnerability that allows an unprivileged user to perf... |
| CVE-2026-82827 | CRITICAL | 9.8 | — | Oct 1, 2026 | Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of... |
| CVE-2026-82826 | HIGH | 7.5 | — | Oct 1, 2026 | Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information wh... |
| CVE-2026-82825 | CRITICAL | 9.8 | — | Oct 1, 2026 | Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This all... |
| CVE-2026-82824 | CRITICAL | 9.8 | — | Oct 1, 2026 | Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker t... |
| CVE-2026-78210 | HIGH | 7.1 | — | Oct 1, 2026 | In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts in an ... |
| CVE-2026-76147 | MEDIUM | 5.9 | — | Oct 1, 2026 | A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent u... |
| CVE-2026-76146 | HIGH | 8.4 | — | Oct 1, 2026 | An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without ... |
| CVE-2026-76145 | HIGH | 7.5 | — | Oct 1, 2026 | An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator p... |
| CVE-2026-76144 | LOW | 1.8 | — | Oct 1, 2026 | An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL... |
| CVE-2026-76143 | HIGH | 7.3 | — | Oct 1, 2026 | A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by mani... |
| CVE-2026-76142 | CRITICAL | 9.3 | — | Oct 1, 2026 | Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy serv... |
| CVE-2026-12241 | MEDIUM | 5.4 | 0.2% | Oct 1, 2026 | The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to unauthorized mod... |
| CVE-2026-103539 | MEDIUM | 5.4 | 0.3% | Oct 1, 2026 | A weakness has been identified in ZongXR SuperMarket 1.0.0.0. This affects the function startBuy of the file instant-buy... |
| CVE-2026-103538 | MEDIUM | 6.5 | — | Oct 1, 2026 | A security flaw has been discovered in ZongXR SuperMarket 1.0.0.0. Affected by this issue is the function OrderControlle... |
| CVE-2026-103536 | HIGH | 7.3 | — | Oct 1, 2026 | A vulnerability was identified in ZongXR Supermarket 1.0.0.0. Affected by this vulnerability is the function OrderContro... |
| CVE-2026-96561 | HIGH | 7.2 | — | Oct 1, 2026 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Sc... |
| CVE-2026-92245 | HIGH | 7.5 | 0.4% | Oct 1, 2026 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up... |
| CVE-2026-91109 | MEDIUM | 6.5 | 0.3% | Oct 1, 2026 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions ... |
| CVE-2026-103641 | MEDIUM | 5.5 | 0.1% | Oct 1, 2026 | A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped image when an uncompressed scanl... |
| CVE-2026-103534 | MEDIUM | 6.3 | 0.2% | Oct 1, 2026 | A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/S... |
| CVE-2026-92537 | MEDIUM | 5.3 | — | Oct 1, 2026 | The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Insufficiently Protected Crede... |
| CVE-2026-103533 | MEDIUM | 4.1 | — | Oct 1, 2026 | A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty... |
| CVE-2026-101887 | LOW | 3.5 | — | Oct 1, 2026 | BlueALSA (bluez-alsa/bluealsad) contains a division-by-zero vulnerability in the LC3plus sink decoder (a2dp-lc3plus.c, a... |
| CVE-2026-93495 | HIGH | 7 | 0.2% | Oct 1, 2026 | Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary me... |