CVE Vulnerability Database
Search and browse 425,091 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-93621 | HIGH | 8.2 | — | Sep 30, 2026 | Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions. |
| CVE-2026-93514 | HIGH | 7.1 | — | Sep 30, 2026 | Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5.2 versions. |
| CVE-2026-93512 | HIGH | 7.1 | — | Sep 30, 2026 | Unauthenticated Cross Site Scripting (XSS) in JW Player for WordPress <= 2.3.11 versions. |
| CVE-2026-92899 | MEDIUM | 4.8 | 0.5% | Sep 30, 2026 | Apache WSS4J remembers the Nonce of each UsernameToken it accepts, so a captured token cannot be reused. It stored the N... |
| CVE-2026-92121 | HIGH | 7.5 | 0.3% | Sep 30, 2026 | In the WSS4J streaming (StAX) code, a signature reference using the WS-Security STR-Transform leaves an internal "inside... |
| CVE-2026-89238 | CRITICAL | 9.1 | 0.2% | Sep 30, 2026 | WSS4J EncryptedHeader child confusion could promote an attacker-controlled plaintext element as the decrypted header, le... |
| CVE-2026-86778 | MEDIUM | 5.3 | — | Sep 30, 2026 | Observable response discrepancy vulnerability in Maksisoft Technology, IT, and Software Industry and Trade Inc. Maksisof... |
| CVE-2026-76504 | CRITICAL | 9.8 | 1.6% | Sep 30, 2026 | A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unaut... |
| CVE-2026-74865 | CRITICAL | 9.2 | — | Sep 30, 2026 | sogo_yhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed du... |
| CVE-2026-74864 | CRITICAL | 9.3 | — | Sep 30, 2026 | sogo_yhn configures SOGo with a parameter that forces the request with HTTP header "x-webobjects-remote-user" to be trea... |
| CVE-2026-62085 | HIGH | 7.6 | — | Sep 30, 2026 | Administrator SQL Injection in WP Activity Log <= 5.6.6 versions. |
| CVE-2026-62083 | MEDIUM | 5.4 | — | Sep 30, 2026 | Subscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions. |
| CVE-2026-62081 | MEDIUM | 5.4 | — | Sep 30, 2026 | Contributor Insecure Direct Object References (IDOR) in Flexible PDF Coupons <= 1.14.11 versions. |
| CVE-2026-62080 | MEDIUM | 6.5 | — | Sep 30, 2026 | Contributor Cross Site Scripting (XSS) in Happy Addons for Elementor <= 3.23.1 versions. |
| CVE-2026-62079 | MEDIUM | 6.5 | — | Sep 30, 2026 | Contributor Cross Site Scripting (XSS) in Qi Addons For Elementor <= 1.11 versions. |
| CVE-2026-62078 | MEDIUM | 6.5 | — | Sep 30, 2026 | Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions. |
| CVE-2026-27371 | HIGH | 7.1 | — | Sep 30, 2026 | Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions. |
| CVE-2026-27085 | LOW | 2.7 | — | Sep 30, 2026 | Shop manager Content Injection in Astra WordPress Theme <= 4.13.12 versions. |
| CVE-2026-103321 | HIGH | 8.3 | — | Sep 30, 2026 | MISP contains a stored cross-site script (XSS) vulnerability in the event graph preview feature. The event graph previe... |
| CVE-2026-103117 | MEDIUM | 4.7 | — | Sep 30, 2026 | A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function db_properties of... |
| CVE-2026-103116 | MEDIUM | 6.3 | — | Sep 30, 2026 | A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functio... |
| CVE-2026-103115 | MEDIUM | 6.3 | 0.3% | Sep 30, 2026 | A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file fun... |
| CVE-2026-102399 | MEDIUM | 5.4 | — | Sep 30, 2026 | Unauthenticated Cross Site Request Forgery (CSRF) in Photo Gallery by Supsystic <= 1.21.0 versions. |
| CVE-2026-102398 | HIGH | 7.1 | — | Sep 30, 2026 | Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.13.1 versions. |
| CVE-2026-102396 | HIGH | 7.1 | — | Sep 30, 2026 | Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic <= 1.5.5 versions. |