CVE Vulnerability Database
Search and browse 392,387 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-24815 | HIGH | 7.8 | 0.2% | Jun 30, 2026 | Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Succ... |
| CVE-2026-45822 | MEDIUM | 6.6 | 0.3% | Jun 30, 2026 | decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits input on '%' produci... |
| CVE-2026-12578 | HIGH | 8.4 | 0.4% | Jun 30, 2026 | The affected product is vulnerable to a deserialization of untrusted data, which may allow an attacker to execute arbitr... |
| CVE-2026-9576 | MEDIUM | 4.9 | 0.1% | Jun 30, 2026 | The Fluent Booking WordPress plugin before 2.1.2 does not verify ownership of the requested group_id before exporting a... |
| CVE-2026-56809 | MEDIUM | 5.1 | 0.3% | Jun 30, 2026 | Multiple laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor contain a reflected cr... |
| CVE-2026-56808 | HIGH | 8.6 | 1.6% | Jun 30, 2026 | DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arb... |
| CVE-2026-56137 | HIGH | 8.4 | 0.7% | Jun 30, 2026 | RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads ... |
| CVE-2026-14164 | HIGH | 7.5 | 0.5% | Jun 30, 2026 | A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive,... |
| CVE-2026-12819 | CRITICAL | 9.3 | 0.3% | Jun 30, 2026 | Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access contro... |
| CVE-2026-12818 | CRITICAL | 9.3 | 0.3% | Jun 30, 2026 | Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling (CWE-... |
| CVE-2026-12240 | HIGH | 8 | 0.3% | Jun 30, 2026 | The Export User Data plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validat... |
| CVE-2026-11590 | HIGH | 8.6 | 0.2% | Jun 30, 2026 | The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sanitize user-supplied array keys b... |
| CVE-2026-11589 | HIGH | 8.8 | 0.2% | Jun 30, 2026 | The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not properly validate uploaded files, a... |
| CVE-2026-11581 | MEDIUM | 5.9 | 0.2% | Jun 30, 2026 | The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.13 does not sanitise a form field's ca... |
| CVE-2026-8944 | MEDIUM | 4.3 | 0.1% | Jun 30, 2026 | The Plugin for Google Analytics by IO technologies plugin for WordPress is vulnerable to Cross-Site Request Forgery in v... |
| CVE-2026-12560 | MEDIUM | 4.4 | 0.2% | Jun 30, 2026 | The Editorial Rating – Product Review & Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting ... |
| CVE-2026-12349 | MEDIUM | 5.3 | 0.2% | Jun 30, 2026 | The Premium Addons for KingComposer plugin for WordPress is vulnerable to unauthorized modification and loss of data in ... |
| CVE-2026-12073 | CRITICAL | 9.8 | 0.3% | Jun 30, 2026 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation via a... |
| CVE-2026-11367 | MEDIUM | 6.5 | 0.5% | Jun 30, 2026 | The PixMagix – WordPress Image Editor plugin for WordPress is vulnerable to Directory Traversal in all versions up to, a... |
| CVE-2026-14160 | MEDIUM | 5.9 | 0.1% | Jun 30, 2026 | Time-of-check time-of-use (TOCTOU) race condition vulnerability in Samsung Open Source Escargot allows Leveraging Race C... |
| CVE-2026-12114 | MEDIUM | 4.4 | 0.2% | Jun 30, 2026 | The Team Members – Multi Language Supported Team Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scriptin... |
| CVE-2026-58302 | HIGH | 8.4 | 0.2% | Jun 30, 2026 | rtapi_app in linuxcnc-uspace in LinuxCNC before 2.9.9 allows privilege escalation. It is installed SUID root and loads s... |
| CVE-2026-12243 | — | — | 0.6% | Jun 30, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-8023 | HIGH | 7.5 | 0.9% | Jun 29, 2026 | Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, ava... |
| CVE-2026-7656 | MEDIUM | 6.8 | 0.3% | Jun 29, 2026 | The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6_nbr.c (handle_ra_input, handle_ns_input, handle_na_input) use... |