CVE Vulnerability Database
Search and browse 397,925 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-22315 | — | — | 0.3% | May 20, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-22314 | HIGH | 7.9 | 0.4% | May 20, 2026 | Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component, Mesa... |
| CVE-2026-0857 | MEDIUM | 4.4 | 0.1% | May 20, 2026 | Use of a Password Hash With Insufficient Computational Effort in Mesalvo MEONA (MEONA Server and MEONA Client) for user ... |
| CVE-2026-0856 | HIGH | 7.8 | 0.1% | May 20, 2026 | Improper Access Control vulnerability in Mesalvo MEONA (MEONA Client and MEONA Server) allows an authenticated MEONA use... |
| CVE-2026-9064 | HIGH | 7.5 | 0.8% | May 20, 2026 | A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an uppe... |
| CVE-2026-6728 | MEDIUM | 5.3 | 0.3% | May 20, 2026 | The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and includ... |
| CVE-2026-44933 | HIGH | 8.5 | 0.2% | May 20, 2026 | `PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) i... |
| CVE-2026-44608 | MEDIUM | 5.9 | 0.3% | May 20, 2026 | NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain... |
| CVE-2026-44390 | MEDIUM | 5.3 | 0.6% | May 20, 2026 | NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets t... |
| CVE-2026-42960 | CRITICAL | 10 | 0.2% | May 20, 2026 | NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authori... |
| CVE-2026-42959 | HIGH | 7.5 | 0.8% | May 20, 2026 | NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that... |
| CVE-2026-42944 | HIGH | 7.5 | 0.8% | May 20, 2026 | NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when enco... |
| CVE-2026-42923 | MEDIUM | 5.3 | 0.3% | May 20, 2026 | NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the DNSSEC validator where the code path to... |
| CVE-2026-42534 | MEDIUM | 5.3 | 0.6% | May 20, 2026 | NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its purp... |
| CVE-2026-41292 | HIGH | 7.5 | 0.7% | May 20, 2026 | NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsin... |
| CVE-2026-41054 | HIGH | 7.8 | 0.2% | May 20, 2026 | In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/ent... |
| CVE-2026-40622 | HIGH | 7.5 | 0.2% | May 20, 2026 | NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of a... |
| CVE-2026-35070 | MEDIUM | 6.7 | 0.5% | May 20, 2026 | Dell SmartFabric Storage Software, versions prior to 1.4.5, contains an Improper Neutralization of Special Elements used... |
| CVE-2026-33278 | CRITICAL | 9.8 | 1.3% | May 20, 2026 | NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables de... |
| CVE-2026-32792 | MEDIUM | 5.3 | 0.3% | May 20, 2026 | NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNS... |
| CVE-2026-9065 | CRITICAL | 9.3 | 0.3% | May 20, 2026 | SureCart version prior to 4.2.1 are vulnerable to authenticated SQL injection via multiple parameters ('model_name', 'mo... |
| CVE-2026-9059 | CRITICAL | 9.3 | 0.3% | May 20, 2026 | NextGEN Gallery version prior to 4.2.1 are vulnerable to authenticated SQL injection via the 'orderby' parameter on the ... |
| CVE-2026-6405 | MEDIUM | 4.3 | 0.2% | May 20, 2026 | The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) ... |
| CVE-2026-5200 | HIGH | 8.8 | 0.3% | May 20, 2026 | The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is v... |
| CVE-2026-7385 | MEDIUM | 5.8 | 0.3% | May 20, 2026 | The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post au... |