CVE Vulnerability Database
Search and browse 425,091 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-102511 | HIGH | 8.5 | — | Sep 30, 2026 | Improper Verification of Source of a Communication Channel in the ADS discovery of the Go implementation of Apache PLC4X... |
| CVE-2026-102510 | HIGH | 8.7 | — | Sep 30, 2026 | Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size V... |
| CVE-2026-102509 | HIGH | 8.7 | — | Sep 30, 2026 | Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the J... |
| CVE-2026-102459 | MEDIUM | 6.1 | — | Sep 30, 2026 | EasyFlow .NET developed by Digiwin has a Reflected Cross-site Scripting vulnerability. Unauthenticated remote attackers ... |
| CVE-2026-102458 | CRITICAL | 9.8 | — | Sep 30, 2026 | EasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. Unauthenticated remote attackers can obta... |
| CVE-2026-102457 | MEDIUM | 6.5 | — | Sep 30, 2026 | EasyFlow .NET developed by Digiwin has an Arbitrary File Read vulnerability. Authenticated remote attackers can exploit ... |
| CVE-2026-102456 | MEDIUM | 6.5 | — | Sep 30, 2026 | EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitra... |
| CVE-2026-102455 | CRITICAL | 9.8 | — | Sep 30, 2026 | EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can ex... |
| CVE-2026-102454 | HIGH | 7.2 | — | Sep 30, 2026 | EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload an... |
| CVE-2025-14564 | MEDIUM | 6.4 | 0.2% | Sep 30, 2026 | The Viable URL Media Uploader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in ... |
| CVE-2026-97150 | HIGH | 8.6 | — | Sep 30, 2026 | When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, w... |
| CVE-2026-93464 | MEDIUM | 5.1 | — | Sep 30, 2026 | A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is... |
| CVE-2026-93463 | MEDIUM | 5.1 | 0.2% | Sep 30, 2026 | A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited... |
| CVE-2026-93462 | MEDIUM | 6.9 | — | Sep 30, 2026 | A missing authentication for critical function vulnerability exists in baserCMS. If this vulnerability is exploited, a r... |
| CVE-2026-93460 | MEDIUM | 5.1 | — | Sep 30, 2026 | A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulner... |
| CVE-2026-92873 | MEDIUM | 6.9 | — | Sep 30, 2026 | Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attack... |
| CVE-2026-92872 | MEDIUM | 5.3 | — | Sep 30, 2026 | Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster i... |
| CVE-2026-92871 | HIGH | 8.7 | — | Sep 30, 2026 | A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnor... |
| CVE-2026-92870 | HIGH | 8.7 | — | Sep 30, 2026 | A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause ab... |
| CVE-2026-92869 | HIGH | 7.1 | — | Sep 30, 2026 | An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal pr... |
| CVE-2026-92868 | MEDIUM | 6.9 | — | Sep 30, 2026 | An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to byp... |
| CVE-2026-92867 | HIGH | 8.7 | — | Sep 30, 2026 | An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal p... |
| CVE-2026-88037 | MEDIUM | 6.4 | — | Sep 30, 2026 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `title` attribute of the... |
| CVE-2026-6806 | HIGH | 7.5 | — | Sep 30, 2026 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Inje... |
| CVE-2026-6173 | MEDIUM | 6.4 | — | Sep 30, 2026 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'background_image' param... |