CVE Vulnerability Database
Search and browse 377,588 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-19230 | LOW | 3.5 | 0.2% | Aug 7, 2026 | A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /soci... |
| CVE-2026-17435 | LOW | 2.5 | 0.2% | Aug 7, 2026 | File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files. When th... |
| CVE-2026-11430 | HIGH | 7.3 | — | Aug 7, 2026 | Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check. When the webhook featu... |
| CVE-2025-71413 | MEDIUM | 6 | 0.2% | Aug 7, 2026 | Malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers cause repeated resets w... |
| CVE-2025-71412 | HIGH | 7.1 | 0.2% | Aug 7, 2026 | Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion... |
| CVE-2025-71411 | MEDIUM | 6 | 0.2% | Aug 7, 2026 | Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic c... |
| CVE-2025-71410 | MEDIUM | 6 | 0.2% | Aug 7, 2026 | Unnumbered Disconnect (U DISC) and malformed Aviation Very High Frequency Link Control frames can terminate sessions and... |
| CVE-2025-71409 | HIGH | 7.1 | 0.2% | Aug 7, 2026 | Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages ... |
| CVE-2025-63235 | HIGH | 7.5 | — | Aug 7, 2026 | In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CON... |
| CVE-2026-66058 | MEDIUM | 5.3 | 0.2% | Aug 7, 2026 | Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.112.0, unrestricted access to a Document Follo... |
| CVE-2026-64638 | HIGH | 8.9 | — | Aug 7, 2026 | WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malici... |
| CVE-2026-64637 | CRITICAL | 9.9 | — | Aug 7, 2026 | Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an ... |
| CVE-2026-64636 | HIGH | 7.7 | — | Aug 7, 2026 | An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to rea... |
| CVE-2026-56818 | MEDIUM | 6.5 | — | Aug 7, 2026 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the Redis... |
| CVE-2026-47364 | MEDIUM | 6.5 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datado... |
| CVE-2026-47363 | MEDIUM | 6.3 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts a... |
| CVE-2026-47362 | MEDIUM | 4.6 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive con... |
| CVE-2026-47361 | MEDIUM | 6.4 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission gu... |
| CVE-2026-44965 | MEDIUM | 5.5 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (IncidentWid... |
| CVE-2026-44964 | MEDIUM | 6.5 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with... |
| CVE-2026-19229 | MEDIUM | 5.5 | 0.3% | Aug 7, 2026 | A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is some unknown functiona... |
| CVE-2026-19213 | MEDIUM | 4.3 | 0.2% | Aug 7, 2026 | A vulnerability was identified in WonderTrader up to 0.9.9. Affected is the function _undone_qty in the library src/WtCo... |
| CVE-2026-19082 | HIGH | 7.5 | — | Aug 7, 2026 | Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count... |
| CVE-2026-71557 | MEDIUM | 6.3 | — | Aug 7, 2026 | go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference name... |
| CVE-2026-71556 | HIGH | 7.1 | — | Aug 7, 2026 | go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree opera... |