CVE Vulnerability Database
Search and browse 425,139 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-71425 | HIGH | 7.3 | 0.2% | Sep 27, 2026 | Contrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to Kubernetes logs, when the Contr... |
| CVE-2025-71424 | LOW | 3.5 | 0.2% | Sep 27, 2026 | Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and includi... |
| CVE-2025-71423 | HIGH | 7.3 | 0.2% | Sep 27, 2026 | Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the initialize... |
| CVE-2025-71422 | MEDIUM | 5.7 | 0.1% | Sep 27, 2026 | Contrast is a Kubernetes runtime for confidential containers. In versions before 1.12.1, the secure persistent volume fe... |
| CVE-2026-100740 | CRITICAL | 9.9 | — | Sep 27, 2026 | A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel... |
| CVE-2026-100739 | HIGH | 7.3 | — | Sep 26, 2026 | A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. ... |
| CVE-2026-94408 | MEDIUM | 4.9 | 0.4% | Sep 26, 2026 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-... |
| CVE-2026-94400 | MEDIUM | 6.5 | 0.4% | Sep 26, 2026 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130) |
| CVE-2026-94399 | MEDIUM | 6.5 | 0.4% | Sep 26, 2026 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-... |
| CVE-2026-94398 | MEDIUM | 6.5 | 0.4% | Sep 26, 2026 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-... |
| CVE-2026-94397 | MEDIUM | 6.5 | 0.4% | Sep 26, 2026 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-... |
| CVE-2026-94396 | MEDIUM | 6.5 | 0.4% | Sep 26, 2026 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-... |
| CVE-2026-82300 | MEDIUM | 6.5 | 0.4% | Sep 26, 2026 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP... |
| CVE-2026-82294 | MEDIUM | 6.5 | 0.4% | Sep 26, 2026 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP... |
| CVE-2026-78582 | MEDIUM | 6.5 | — | Sep 26, 2026 | Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configure... |
| CVE-2026-72668 | HIGH | 7.3 | — | Sep 26, 2026 | Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead to privilege escalation.... |
| CVE-2026-72662 | MEDIUM | 6.3 | — | Sep 26, 2026 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized disclosure, modification, ... |
| CVE-2026-82901 | CRITICAL | 9.8 | — | Sep 26, 2026 | The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file... |
| CVE-2026-85984 | CRITICAL | 9.8 | — | Sep 26, 2026 | The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass... |
| CVE-2026-77203 | HIGH | 8.8 | — | Sep 26, 2026 | The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions u... |
| CVE-2026-97163 | CRITICAL | 9.8 | 0.4% | Sep 26, 2026 | Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29 |
| CVE-2026-97162 | CRITICAL | 9.8 | 0.3% | Sep 26, 2026 | Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29 |
| CVE-2026-97161 | HIGH | 7.5 | 0.4% | Sep 26, 2026 | Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.... |
| CVE-2026-97160 | HIGH | 8.8 | 1.3% | Sep 26, 2026 | Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0... |
| CVE-2026-94132 | HIGH | 8.1 | 0.5% | Sep 26, 2026 | Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterpri... |