CVE Vulnerability Database
Search and browse 397,743 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-6240 | MEDIUM | 6.8 | 0.2% | Jun 6, 2026 | A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers service, due to insufficie... |
| CVE-2026-6239 | MEDIUM | 6.8 | 0.2% | Jun 6, 2026 | A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device ... |
| CVE-2026-34123 | HIGH | 7 | 0.2% | Jun 6, 2026 | On Tapo C520WS v2, restricted accounts (for example, hub users) are intended to execute only a limited set of low‑sensit... |
| CVE-2026-10038 | MEDIUM | 4.3 | 0.3% | Jun 6, 2026 | The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vul... |
| CVE-2025-12656 | LOW | 3.8 | 0.3% | Jun 6, 2026 | The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary directory de... |
| CVE-2026-7654 | HIGH | 8.8 | 0.7% | Jun 5, 2026 | The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in version... |
| CVE-2026-7523 | MEDIUM | 4.3 | 0.3% | Jun 5, 2026 | The Alba Board plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. T... |
| CVE-2026-45409 | MEDIUM | 5.3 | 0.4% | Jun 5, 2026 | Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in ... |
| CVE-2026-11431 | HIGH | 8.3 | 0.5% | Jun 5, 2026 | A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and A... |
| CVE-2026-11429 | CRITICAL | 10 | 1.1% | Jun 5, 2026 | Two endpoints in the Vault Service ScriptsController, shared by Altium Enterprise Server and Altium 365, accept file upl... |
| CVE-2026-11424 | HIGH | 8.3 | 0.2% | Jun 5, 2026 | A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared by Altium Enterprise Ser... |
| CVE-2026-11416 | HIGH | 8.1 | 0.5% | Jun 5, 2026 | MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage download handlers where... |
| CVE-2026-36785 | HIGH | 7.5 | 0.4% | Jun 5, 2026 | Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the page parameter... |
| CVE-2026-11423 | CRITICAL | 9.4 | 0.3% | Jun 5, 2026 | A path traversal vulnerability exists in the Altium Enterprise Server Collaboration Service due to improper handling of ... |
| CVE-2026-11422 | HIGH | 8.4 | 0.2% | Jun 5, 2026 | Markdown Preview Enhanced 0.8.x with crossnote engine 0.9.28 contains a code injection vulnerability in the WaveDrom ren... |
| CVE-2026-46493 | HIGH | 7.5 | 0.3% | Jun 5, 2026 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.1 use `uniqid` for generatin... |
| CVE-2026-46401 | MEDIUM | 5.3 | 0.3% | Jun 5, 2026 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.0 suffer from an improper se... |
| CVE-2026-46400 | HIGH | 8.7 | 0.4% | Jun 5, 2026 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 11.0.6 and prior to version 25.... |
| CVE-2026-46398 | HIGH | 8.8 | 0.2% | Jun 5, 2026 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 25.0.0 and prior to version 26.... |
| CVE-2026-46397 | MEDIUM | 6.5 | 0.3% | Jun 5, 2026 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an Authenticated Local Fil... |
| CVE-2026-46357 | MEDIUM | 6.5 | 0.2% | Jun 5, 2026 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the HAX CMS NodeJS applica... |
| CVE-2026-45779 | CRITICAL | 9.8 | 0.5% | Jun 5, 2026 | OpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerability exists in Open X... |
| CVE-2026-45778 | MEDIUM | 5.4 | 0.1% | Jun 5, 2026 | OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, an authenticated attac... |
| CVE-2026-45777 | CRITICAL | 9.8 | 0.4% | Jun 5, 2026 | OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Starting in version 9.5.0 and prior to version ... |
| CVE-2026-45776 | MEDIUM | 4.3 | 0.2% | Jun 5, 2026 | OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, a flaw in Open XDMoD's... |