CVE Vulnerability Database
Search and browse 394,301 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-57587 | MEDIUM | 5.3 | 0.3% | Jun 25, 2026 | A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a... |
| CVE-2026-57536 | MEDIUM | 6.3 | 0.3% | Jun 25, 2026 | Our payment integration with Mollie did not properly validate payment status responses. An attacker could use a success... |
| CVE-2026-57535 | LOW | 2.1 | 0.3% | Jun 25, 2026 | Content injected to PDF rendering contexts could, in many places, include HTML content including <img> tags. If the src ... |
| CVE-2026-57534 | LOW | 2.1 | 0.3% | Jun 25, 2026 | Malicious HTML content could be injected into the content of a page in the pretix-pages plugin. |
| CVE-2026-57533 | LOW | 2.1 | 0.2% | Jun 25, 2026 | Malicious HTML content could be injected into the page pretix shows when redirection to an untrusted page occurs. Since... |
| CVE-2026-57532 | HIGH | 8.8 | 0.3% | Jun 25, 2026 | Malicious HTML content contained in the layout specification of a PDF ticket or badge layout was executed when the PDF ... |
| CVE-2026-57437 | MEDIUM | 5.3 | 0.3% | Jun 25, 2026 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::XPath... |
| CVE-2026-57436 | MEDIUM | 5.3 | 0.3% | Jun 25, 2026 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Docum... |
| CVE-2026-57435 | HIGH | 7.5 | 0.3% | Jun 25, 2026 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri’s CRuby nat... |
| CVE-2026-57434 | HIGH | 7.5 | 0.3% | Jun 25, 2026 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a ... |
| CVE-2026-57236 | HIGH | 8.2 | 0.3% | Jun 25, 2026 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, calling Document#enc... |
| CVE-2026-57235 | HIGH | 8.2 | 0.3% | Jun 25, 2026 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::NodeS... |
| CVE-2026-57234 | LOW | 2.6 | 0.2% | Jun 25, 2026 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, the NONET parse opti... |
| CVE-2026-49319 | MEDIUM | 6.9 | 0.2% | Jun 25, 2026 | Remote Keyless Entry System (RKES), using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., L... |
| CVE-2026-46735 | HIGH | 7.8 | 0.7% | Jun 25, 2026 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutralization of Special Ele... |
| CVE-2026-13314 | LOW | 2 | 0.3% | Jun 25, 2026 | Malicious HTML content could be injected into the content rendered by the pretix-digital plugin. |
| CVE-2026-13225 | MEDIUM | 5.3 | 0.3% | Jun 25, 2026 | Malicious HTML content could be injected into the email address of an order, which pretix showed without sanitization o... |
| CVE-2026-13223 | MEDIUM | 6.3 | 0.3% | Jun 25, 2026 | Our payment integration with Computop-based payment methods did not properly validate payment status responses. An atta... |
| CVE-2026-13222 | MEDIUM | 6.3 | 0.3% | Jun 25, 2026 | Our payment integration with Oppwa-based payment methods did not properly validate payment status responses. An attacke... |
| CVE-2026-57619 | MEDIUM | 6.5 | 0.3% | Jun 25, 2026 | Contributor Sensitive Data Exposure in Elementor Website Builder <= 4.1.3 versions. |
| CVE-2026-57429 | MEDIUM | 6.5 | 0.2% | Jun 25, 2026 | Contributor Broken Access Control in Slim SEO <= 4.6.2 versions. |
| CVE-2026-56122 | HIGH | 8.7 | 0.4% | Jun 25, 2026 | Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to ... |
| CVE-2026-56071 | HIGH | 7.1 | 0.2% | Jun 25, 2026 | Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions. |
| CVE-2026-56054 | HIGH | 7.7 | 0.4% | Jun 25, 2026 | Subscriber Arbitrary File Deletion in JS Help Desk <= 3.1.1 versions. |
| CVE-2026-56053 | HIGH | 8.8 | 0.4% | Jun 25, 2026 | Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions. |