CVE Vulnerability Database
Search and browse 398,037 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-8161 | HIGH | 7.5 | 0.5% | May 12, 2026 | multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught exception. By sending a multipart/f... |
| CVE-2026-8159 | HIGH | 7.5 | 0.3% | May 12, 2026 | multiparty@4.2.3 and lower versions are vulnerable to denial of service via regular expression backtracking in the Conte... |
| CVE-2026-8072 | CRITICAL | 9.2 | 0.2% | May 12, 2026 | Insecure generation of credentials in the local SAT (Technical Support) access functionality of the Ingecon Sun EMS Boar... |
| CVE-2026-7428 | CRITICAL | 9.2 | 0.2% | May 12, 2026 | Prior to 2025-11-03, well-intended users of Terraform or REST API for Google Cloud AlloyDB for PostgreSQL could have cre... |
| CVE-2026-6813 | MEDIUM | 4.4 | 0.2% | May 12, 2026 | The Continually plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up ... |
| CVE-2026-6800 | MEDIUM | 4.4 | 0.2% | May 12, 2026 | The FastBots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to,... |
| CVE-2026-6001 | HIGH | 8.8 | 0.2% | May 12, 2026 | Authorization bypass through User-Controlled key vulnerability in ABIS Technology Ltd. Co. BAPSİS allows Exploitation of... |
| CVE-2026-5029 | HIGH | 8.7 | 0.3% | May 12, 2026 | A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which ... |
| CVE-2026-44412 | HIGH | 7.8 | 0.1% | May 12, 2026 | A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected applications con... |
| CVE-2026-44411 | HIGH | 7.8 | 0.1% | May 12, 2026 | A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected application is v... |
| CVE-2026-41551 | CRITICAL | 9.3 | 0.5% | May 12, 2026 | A vulnerability has been identified in ROS# (All versions < V2.2.2). Affected versions contain a path traversal vulnerab... |
| CVE-2026-41125 | MEDIUM | 6 | 0.2% | May 12, 2026 | A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blu... |
| CVE-2026-33893 | HIGH | 8.7 | 0.3% | May 12, 2026 | A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2... |
| CVE-2026-33862 | MEDIUM | 6.1 | 0.2% | May 12, 2026 | A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2... |
| CVE-2026-27662 | HIGH | 7.7 | 0.1% | May 12, 2026 | Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security... |
| CVE-2026-25789 | HIGH | 7.2 | 0.3% | May 12, 2026 | Affected devices do not properly validate and sanitize filenames on the Firmware Update page. This could allow a remote ... |
| CVE-2026-25787 | CRITICAL | 9.3 | 0.4% | May 12, 2026 | Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagn... |
| CVE-2026-25786 | CRITICAL | 9.3 | 0.4% | May 12, 2026 | Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page ... |
| CVE-2026-22925 | HIGH | 8.7 | 0.3% | May 12, 2026 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application is susceptible to... |
| CVE-2026-22924 | CRITICAL | 9.1 | 0.3% | May 12, 2026 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properly... |
| CVE-2026-1934 | MEDIUM | 4.3 | 0.2% | May 12, 2026 | The Motors – Car Dealership & Classified Listings plugin for WordPress is vulnerable to Payment Bypass via insecure user... |
| CVE-2025-6577 | CRITICAL | 9.8 | 0.3% | May 12, 2026 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce So... |
| CVE-2025-40949 | CRITICAL | 9.1 | 0.5% | May 12, 2026 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versio... |
| CVE-2025-40948 | MEDIUM | 6.8 | 0.3% | May 12, 2026 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versio... |
| CVE-2025-40947 | HIGH | 7.7 | 0.4% | May 12, 2026 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versio... |