CVE Vulnerability Database
Search and browse 425,091 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-94002 | HIGH | 7.5 | — | Sep 30, 2026 | Possible memory exhaustion in SFTP clients (DefaultSftpClient) in component sshd-sftp in Apache MINA SSHD versions 0.9.0... |
| CVE-2026-93996 | MEDIUM | 6.5 | — | Sep 30, 2026 | Uncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5... |
| CVE-2026-93995 | MEDIUM | 6.5 | — | Sep 30, 2026 | Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA ... |
| CVE-2026-93994 | HIGH | 8.1 | — | Sep 30, 2026 | Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-a... |
| CVE-2026-79625 | HIGH | 8.1 | — | Sep 30, 2026 | Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concu... |
| CVE-2026-77185 | CRITICAL | 9.1 | — | Sep 30, 2026 | Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (... |
| CVE-2026-10764 | HIGH | 8.7 | — | Sep 30, 2026 | Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access t... |
| CVE-2026-103237 | HIGH | 8.3 | — | Sep 30, 2026 | MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various ... |
| CVE-2026-103235 | HIGH | 8.7 | — | Sep 30, 2026 | MISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission su... |
| CVE-2026-97347 | HIGH | 7.2 | — | Sep 30, 2026 | The Post Views Stats Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in ... |
| CVE-2026-93908 | MEDIUM | 6.4 | 0.2% | Sep 30, 2026 | The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site ... |
| CVE-2026-92712 | MEDIUM | 6.4 | — | Sep 30, 2026 | The ReactPress – Create React App for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th... |
| CVE-2026-75098 | HIGH | 7.5 | — | Sep 30, 2026 | The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including,... |
| CVE-2026-102588 | MEDIUM | 6.5 | 0.2% | Sep 30, 2026 | A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation... |
| CVE-2026-102587 | LOW | 2.7 | 0.2% | Sep 30, 2026 | A flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on user profile fields. An... |
| CVE-2026-102586 | MEDIUM | 6.1 | 0.3% | Sep 30, 2026 | A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attac... |
| CVE-2026-102585 | MEDIUM | 4.3 | 0.2% | Sep 30, 2026 | A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does no... |
| CVE-2026-102584 | MEDIUM | 4.3 | 0.2% | Sep 30, 2026 | A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recal... |
| CVE-2026-102583 | LOW | 2.7 | 0.2% | Sep 30, 2026 | A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image g... |
| CVE-2026-102582 | MEDIUM | 4.3 | 0.2% | Sep 30, 2026 | A flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plu... |
| CVE-2026-102581 | MEDIUM | 5.4 | 0.2% | Sep 30, 2026 | A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross... |
| CVE-2026-102580 | MEDIUM | 4.3 | 0.2% | Sep 30, 2026 | A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Repo... |
| CVE-2026-102579 | MEDIUM | 4.3 | — | Sep 30, 2026 | A flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to ac... |
| CVE-2026-102578 | HIGH | 8.8 | 0.2% | Sep 30, 2026 | A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitize... |
| CVE-2026-102577 | MEDIUM | 4.3 | — | Sep 30, 2026 | A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking l... |