CVE Vulnerability Database
Search and browse 420,242 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-120201 | CRITICAL | 9.8 | 0.6% | Oct 31, 2026 | Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gai... |
| CVE-2026-120200 | MEDIUM | 5.4 | 0.2% | Oct 31, 2026 | Nexterm through 1.2.2-BETA contains a missing authorization vulnerability that allows authenticated users to hibernate, ... |
| CVE-2026-120199 | MEDIUM | 4.3 | 0.2% | Oct 31, 2026 | LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that allows authenticated u... |
| CVE-2026-102212 | HIGH | 8.4 | 0.3% | Oct 31, 2026 | Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console serv... |
| CVE-2026-78192 | HIGH | 7.5 | 0.2% | Oct 31, 2026 | WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer ... |
| CVE-2026-78191 | CRITICAL | 9.8 | 0.5% | Oct 31, 2026 | WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages. WebDyne d... |
| CVE-2026-78190 | MEDIUM | 6.1 | 0.2% | Oct 31, 2026 | WebDyne versions from 2.014 before 3.022 for Perl reflect request parameters unescaped into form field values, allowing ... |
| CVE-2026-78189 | CRITICAL | 9.8 | 0.2% | Oct 31, 2026 | WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the... |
| CVE-2026-78188 | MEDIUM | 5.4 | 0.1% | Oct 31, 2026 | WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure, HttpOnly and SameSite attrib... |
| CVE-2026-15272 | MEDIUM | 6.5 | 0.3% | Oct 31, 2026 | The Web 2.0 Directory plugin for WordPress is vulnerable to time-based SQL Injection via the 'w2dc_level_filter' paramet... |
| CVE-2026-96554 | MEDIUM | 6.4 | 0.2% | Oct 31, 2026 | The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Name in all versions ... |
| CVE-2026-76010 | HIGH | 8.8 | 0.8% | Oct 31, 2026 | The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Exec... |
| CVE-2026-120194 | HIGH | 7.5 | 0.5% | Oct 31, 2026 | A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when gi... |
| CVE-2026-120114 | HIGH | 7.2 | 0.4% | Oct 31, 2026 | The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Stored Cross-Site ... |
| CVE-2026-118599 | MEDIUM | 5.5 | 0.2% | Oct 31, 2026 | A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webexte... |
| CVE-2026-118598 | MEDIUM | 6.5 | 0.5% | Oct 31, 2026 | A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user ... |
| CVE-2026-116752 | MEDIUM | 6.4 | 0.3% | Oct 31, 2026 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to ... |
| CVE-2026-109231 | MEDIUM | 4.3 | 0.4% | Oct 31, 2026 | The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via Activation ... |
| CVE-2026-109197 | HIGH | 7.5 | 0.4% | Oct 31, 2026 | The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield' parameter in all vers... |
| CVE-2026-107711 | MEDIUM | 6.4 | 0.3% | Oct 31, 2026 | The FlexStock – Product Stock Sync with Google Sheets for WooCommerce plugin for WordPress is vulnerable to Stored Cross... |
| CVE-2026-104926 | MEDIUM | 6.1 | 0.3% | Oct 31, 2026 | The WooCommerce Extra Product Options Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '... |
| CVE-2026-100151 | MEDIUM | 6.1 | 0.2% | Oct 31, 2026 | The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is v... |
| CVE-2026-120075 | HIGH | 7.2 | 0.2% | Oct 31, 2026 | The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and includi... |
| CVE-2026-119160 | MEDIUM | 6.4 | 0.2% | Oct 31, 2026 | The Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News plugin for WordPress is vulnerab... |
| CVE-2026-118235 | CRITICAL | 9.8 | 0.7% | Oct 31, 2026 | The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable... |