CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-119119 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _clamp_untrusted() fails... |
| CVE-2026-119118 | MEDIUM | 6.5 | — | Oct 29, 2026 | Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers to interce... |
| CVE-2026-118673 | MEDIUM | 4.1 | 0.1% | Oct 29, 2026 | KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2... |
| CVE-2026-118085 | HIGH | 7.1 | 0.2% | Oct 29, 2026 | Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions. |
| CVE-2026-118084 | MEDIUM | 6.5 | 0.3% | Oct 29, 2026 | Subscriber Insecure Direct Object References (IDOR) in Hotel Booking <= 3.8 versions. |
| CVE-2026-118083 | HIGH | 7.5 | 0.3% | Oct 29, 2026 | Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions. |
| CVE-2026-118082 | HIGH | 8.8 | 0.4% | Oct 29, 2026 | Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions. |
| CVE-2026-118081 | HIGH | 8.8 | — | Oct 29, 2026 | Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions. |
| CVE-2026-118080 | HIGH | 8.8 | — | Oct 29, 2026 | Contributor PHP Object Injection in Social Snap <= 1.5.4 versions. |
| CVE-2026-118079 | HIGH | 7.2 | 0.3% | Oct 29, 2026 | Deserialization of Untrusted Data vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows... |
| CVE-2026-118078 | HIGH | 7.2 | 0.3% | Oct 29, 2026 | Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions. |
| CVE-2026-118077 | HIGH | 7.2 | 0.3% | Oct 29, 2026 | Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions. |
| CVE-2026-118076 | HIGH | 8.8 | — | Oct 29, 2026 | Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions. |
| CVE-2026-118075 | HIGH | 8.8 | — | Oct 29, 2026 | Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions. |
| CVE-2026-118074 | HIGH | 7.2 | 0.3% | Oct 29, 2026 | Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions. |
| CVE-2026-118073 | HIGH | 8.8 | 0.4% | Oct 29, 2026 | Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions. |
| CVE-2026-116869 | HIGH | 7.2 | 0.3% | Oct 29, 2026 | Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions. |
| CVE-2026-116868 | HIGH | 8.8 | — | Oct 29, 2026 | Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions. |
| CVE-2026-116867 | HIGH | 8.8 | — | Oct 29, 2026 | Contributor PHP Object Injection in Dynamic QR Code – generator <= 1.0.1 versions. |
| CVE-2026-116866 | HIGH | 8.8 | 0.3% | Oct 29, 2026 | Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions. |
| CVE-2026-116865 | HIGH | 7.2 | 0.3% | Oct 29, 2026 | Editor PHP Object Injection in Zippy <= 1.7.0 versions. |
| CVE-2026-116864 | HIGH | 7.2 | 0.3% | Oct 29, 2026 | Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions. |
| CVE-2026-116848 | MEDIUM | 6.5 | 0.1% | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Innovatio... |
| CVE-2026-115795 | MEDIUM | 5.3 | 0.2% | Oct 29, 2026 | P-Net before 1.0.3 does not check that a complete block header is present in the received data before reading the next b... |
| CVE-2026-115794 | LOW | 2.3 | 0.2% | Oct 29, 2026 | P-Net before 1.0.3 passes the application alarm callback a data length derived from the variable part length field of a ... |