CVE Vulnerability Database
Search and browse 420,405 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-103331 | MEDIUM | 5.3 | 0.2% | Oct 28, 2026 | The UniPAY Payment Gateway For WooCommerce WordPress plugin before 2.4 does not properly verify the authenticity of paym... |
| CVE-2026-115522 | MEDIUM | 5.3 | 0.4% | Oct 28, 2026 | Exposure of Resource to Wrong Sphere (CWE-668) in FileArtifactService in Google Agent Development Kit (ADK) for Python (... |
| CVE-2026-104384 | HIGH | 8.7 | 0.4% | Oct 28, 2026 | Insufficiently Protected Credentials in tunnel gateway and provisioning interfaces in EagleCloud Aquila versions through... |
| CVE-2026-104383 | CRITICAL | 9.4 | 0.4% | Oct 28, 2026 | Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premise... |
| CVE-2026-99100 | — | — | 0.2% | Oct 28, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate firmware record lengths The p5... |
| CVE-2026-1928 | HIGH | 8.8 | 0.5% | Oct 28, 2026 | The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in ... |
| CVE-2026-118276 | LOW | 3.5 | 0.2% | Oct 28, 2026 | A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString o... |
| CVE-2026-118275 | MEDIUM | 5.3 | 0.4% | Oct 28, 2026 | A vulnerability was found in a2ui-project a2ui up to 0.10.6. This affects the function DataContext.resolveSignal of the ... |
| CVE-2026-116613 | HIGH | 7.5 | 0.3% | Oct 28, 2026 | The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and incl... |
| CVE-2026-111727 | MEDIUM | 6.4 | 0.2% | Oct 28, 2026 | The Appointment Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vs_text_subm... |
| CVE-2026-111255 | HIGH | 7.5 | 0.5% | Oct 28, 2026 | The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary... |
| CVE-2026-97019 | HIGH | 7.2 | 0.2% | Oct 28, 2026 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'headlin... |
| CVE-2026-84999 | CRITICAL | 9.8 | 0.5% | Oct 28, 2026 | The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and ... |
| CVE-2026-118384 | MEDIUM | 6.1 | 0.3% | Oct 28, 2026 | GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c. |
| CVE-2026-118378 | HIGH | 7.8 | 0.2% | Oct 28, 2026 | Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute ... |
| CVE-2026-118377 | HIGH | 7.5 | 0.2% | Oct 28, 2026 | mews/pos through 2.0.0 contains an insufficient verification of data authenticity vulnerability that allows unauthentica... |
| CVE-2026-118376 | MEDIUM | 5.3 | 0.3% | Oct 28, 2026 | WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-p... |
| CVE-2026-118375 | HIGH | 8.1 | 0.4% | Oct 28, 2026 | llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdma_recv() f... |
| CVE-2026-118374 | MEDIUM | 5.9 | 0.2% | Oct 28, 2026 | LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exh... |
| CVE-2026-118373 | LOW | 3.7 | 0.1% | Oct 28, 2026 | LibreSSL ocspcheck through 4.4.0 contains a cleartext transmission vulnerability because url2host() discards the OCSP UR... |
| CVE-2026-118372 | LOW | 3.7 | 0.1% | Oct 28, 2026 | LibreSSL ocspcheck through 4.4.0 contains a CRLF injection vulnerability that allows attackers to inject HTTP headers by... |
| CVE-2026-118371 | LOW | 3.7 | 0.1% | Oct 28, 2026 | LibreSSL through 4.4.0 contains a CRLF injection vulnerability in the libcrypto OCSP_sendreq_new() and OCSP_parse_url() ... |
| CVE-2026-118370 | HIGH | 8.2 | 0.4% | Oct 28, 2026 | libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows att... |
| CVE-2026-118274 | MEDIUM | 4.3 | 0.3% | Oct 28, 2026 | A vulnerability has been found in a2ui-project a2ui up to 0.10.6. Affected by this issue is some unknown functionality o... |
| CVE-2026-118273 | MEDIUM | 4.3 | 0.3% | Oct 28, 2026 | A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the function DataModel.set of... |