CVE Vulnerability Database
Search and browse 420,251 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-13747 | MEDIUM | 6.5 | — | Oct 30, 2026 | The Meow Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.5.4 ... |
| CVE-2026-119979 | HIGH | 8.8 | — | Oct 30, 2026 | LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that ... |
| CVE-2026-119978 | HIGH | 8.5 | 0.3% | Oct 30, 2026 | Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by ... |
| CVE-2026-119777 | HIGH | 8.8 | 0.5% | Oct 30, 2026 | A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream... |
| CVE-2026-119764 | MEDIUM | 6.8 | 0.3% | Oct 30, 2026 | Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows attackers controlling ta... |
| CVE-2026-119763 | MEDIUM | 5.3 | — | Oct 30, 2026 | changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attacker... |
| CVE-2026-119762 | HIGH | 7.5 | — | Oct 30, 2026 | Axigen Mail Server before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 contains an unauthenticated denial of... |
| CVE-2026-119761 | MEDIUM | 6.1 | 0.3% | Oct 30, 2026 | Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-site scripting vulnerability that allows un... |
| CVE-2026-119760 | HIGH | 7.5 | 0.5% | Oct 30, 2026 | sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthent... |
| CVE-2026-119620 | HIGH | 7.3 | — | Oct 30, 2026 | A vulnerability was determined in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. Thi... |
| CVE-2026-119619 | HIGH | 7.3 | 0.3% | Oct 30, 2026 | A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This aff... |
| CVE-2026-119176 | MEDIUM | 6.4 | — | Oct 30, 2026 | The CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subject' pa... |
| CVE-2026-119113 | MEDIUM | 6.4 | — | Oct 30, 2026 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to ... |
| CVE-2026-119086 | MEDIUM | 6.5 | — | Oct 30, 2026 | Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enable... |
| CVE-2026-118697 | CRITICAL | 9 | 0.3% | Oct 30, 2026 | In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider ... |
| CVE-2026-118696 | HIGH | 8 | — | Oct 30, 2026 | In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2... |
| CVE-2026-118635 | MEDIUM | 6.5 | — | Oct 30, 2026 | The The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable... |
| CVE-2026-118205 | HIGH | 7.4 | — | Oct 30, 2026 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Privile... |
| CVE-2026-116552 | MEDIUM | 4.7 | — | Oct 30, 2026 | The Like Button Rating ♥ LikeBtn plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTP_CLIENT_... |
| CVE-2026-115869 | MEDIUM | 6.4 | — | Oct 30, 2026 | The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'variations' repeater fiel... |
| CVE-2026-115820 | MEDIUM | 6.5 | — | Oct 30, 2026 | The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to generi... |
| CVE-2026-115346 | HIGH | 8.1 | — | Oct 30, 2026 | The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in ve... |
| CVE-2026-112365 | HIGH | 7.2 | — | Oct 30, 2026 | The easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution plugin for WordPress is vu... |
| CVE-2026-110533 | MEDIUM | 6.4 | — | Oct 30, 2026 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fv_player_vide... |
| CVE-2026-110305 | HIGH | 7.5 | — | Oct 30, 2026 | The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all version... |