CVE Vulnerability Database

Search and browse 420,242 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-18199HIGH8.8Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an au...
CVE-2026-103310MEDIUM5.3The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the authenticity of payment notifi...
CVE-2026-101184MEDIUM5.5Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affe...
CVE-2026-101178MEDIUM6.6Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability m...
CVE-2026-120349HIGH7.3A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function str_replace ...
CVE-2026-101186HIGH7.5DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101185MEDIUM5.9OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect servic...
CVE-2026-101183MEDIUM5.9UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect avail...
CVE-2026-101182MEDIUM5.9Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may a...
CVE-2026-101181MEDIUM5.5Permission control vulnerability in the WLAN module.  Impact: Successful exploitation of this vulnerability may affect s...
CVE-2026-101180MEDIUM4.3DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availabil...
CVE-2026-101179MEDIUM4.7Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affe...
CVE-2026-101177LOW3.7Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affe...
CVE-2026-101176HIGH7.1Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vu...
CVE-2026-101175MEDIUM4.3Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may a...
CVE-2026-101174MEDIUM5.7DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101173MEDIUM6.5DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101172MEDIUM6.2Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affec...
CVE-2026-101171LOW3.6Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulne...
CVE-2026-101170MEDIUM4DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availabil...
CVE-2026-120348HIGH7.3A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function _get_tpl_...
CVE-2026-120347HIGH7.3A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Co...
CVE-2026-120345CRITICAL10A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This impacts the function sub_41a430 of the fil...
CVE-2025-11969CRITICAL9.4The System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privilege roles to ex...
CVE-2024-5617MEDIUM4.8The account lock feature fails to correctly enforce account lockouts on the primary user store when users with identical...