CVE Vulnerability Database
Search and browse 394,819 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-39438 | CRITICAL | 9.3 | 0.4% | Jun 17, 2026 | Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions. |
| CVE-2026-39433 | MEDIUM | 6.5 | 0.4% | Jun 17, 2026 | Subscriber Arbitrary Content Deletion in WPAMS < 49.5.3 versions. |
| CVE-2026-34895 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Softlab Core < 1.2.11 versions. |
| CVE-2026-34894 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions. |
| CVE-2026-34893 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions. |
| CVE-2026-34888 | HIGH | 7.5 | 0.3% | Jun 17, 2026 | Unauthenticated Sensitive Data Exposure in Bricksforge <= 3.1.8.4 versions. |
| CVE-2026-32967 | CRITICAL | 9.1 | 0.3% | Jun 17, 2026 | Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler. This issue affects Ap... |
| CVE-2026-32966 | CRITICAL | 9.8 | 0.4% | Jun 17, 2026 | DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler... |
| CVE-2026-2604 | MEDIUM | 5.6 | 0.2% | Jun 17, 2026 | A flaw was found in evolution-data-server. Inconsistent comparison logic in the addressbook file backend allows a Flatpa... |
| CVE-2026-28615 | HIGH | 7.8 | 0.1% | Jun 17, 2026 | In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass. This could lead... |
| CVE-2026-28587 | MEDIUM | 5.5 | 0.1% | Jun 17, 2026 | In MmsSmsProvider of MmsSmsProvider.java, there is a possible way to retrieve sensitive information due to a missing per... |
| CVE-2026-28576 | MEDIUM | 5.5 | 0.1% | Jun 17, 2026 | In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to l... |
| CVE-2026-28575 | MEDIUM | 5.5 | 0.1% | Jun 17, 2026 | In PackageInstaller.Session#transfer of frameworks/base/services/core/java/com/android/server/pm/PackageInstallerSession... |
| CVE-2026-27870 | MEDIUM | 4.8 | 0.3% | Jun 17, 2026 | An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, registration actio... |
| CVE-2026-27869 | MEDIUM | 6.9 | 0.4% | Jun 17, 2026 | An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration ac... |
| CVE-2026-27868 | MEDIUM | 6.9 | 0.4% | Jun 17, 2026 | An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration ac... |
| CVE-2026-27429 | CRITICAL | 9.8 | 0.6% | Jun 17, 2026 | Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions. |
| CVE-2026-27410 | MEDIUM | 6.5 | 0.3% | Jun 17, 2026 | Unauthenticated Deserialization of untrusted data in Slimstat Analytics < 5.4.0 versions. |
| CVE-2026-27400 | HIGH | 8.6 | 0.5% | Jun 17, 2026 | Unauthenticated Arbitrary File Deletion in BookPro <= 1.1.0 versions. |
| CVE-2026-27395 | CRITICAL | 9.8 | 0.3% | Jun 17, 2026 | Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions. |
| CVE-2026-27041 | CRITICAL | 9.9 | 0.3% | Jun 17, 2026 | Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions. |
| CVE-2026-25470 | CRITICAL | 10 | 0.4% | Jun 17, 2026 | Unauthenticated Remote Code Execution (RCE) in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.47 versions. |
| CVE-2026-25446 | CRITICAL | 9.9 | 0.4% | Jun 17, 2026 | Subscriber Arbitrary File Upload in WishList Member X <= 3.29.0 versions. |
| CVE-2026-25439 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Broken Authentication in Booknetic <= 4.8.5 versions. |
| CVE-2026-24611 | CRITICAL | 9.1 | 0.4% | Jun 17, 2026 | Unauthenticated Broken Access Control in MetForm Pro <= 3.9.1 versions. |