CVE Vulnerability Database
Search and browse 420,408 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-117494 | — | — | 0.3% | Oct 27, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-117493 | HIGH | 8.3 | 0.3% | Oct 27, 2026 | Stored Cross-Site Scripting (XSS) in Sisense BloX widgets, in all versions, both on Sisense Cloud and in self-hosted dep... |
| CVE-2026-107147 | MEDIUM | 6.3 | 0.4% | Oct 27, 2026 | The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address h... |
| CVE-2026-107146 | MEDIUM | 6.3 | 0.3% | Oct 27, 2026 | The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verification. Du... |
| CVE-2026-107145 | MEDIUM | 6.3 | 0.3% | Oct 27, 2026 | The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor code. Due to the l... |
| CVE-2026-102789 | CRITICAL | 9.3 | 0.3% | Oct 27, 2026 | Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorCon... |
| CVE-2026-102788 | CRITICAL | 9.3 | 0.4% | Oct 27, 2026 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On store product list pages, the ... |
| CVE-2026-102787 | MEDIUM | 5.3 | 0.2% | Oct 27, 2026 | Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5 |
| CVE-2026-92885 | CRITICAL | 9.8 | 0.4% | Oct 27, 2026 | The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versi... |
| CVE-2026-65213 | MEDIUM | 6.6 | 0.5% | Oct 27, 2026 | This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BM... |
| CVE-2026-65211 | HIGH | 7.2 | 0.3% | Oct 27, 2026 | This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby exe... |
| CVE-2026-65220 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate ... |
| CVE-2026-65219 | HIGH | 7.4 | 0.5% | Oct 27, 2026 | A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP mess... |
| CVE-2026-65210 | MEDIUM | 4.9 | 0.2% | Oct 27, 2026 | This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing mat... |
| CVE-2026-18451 | LOW | 3.1 | 0.2% | Oct 27, 2026 | The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation m... |
| CVE-2026-18450 | CRITICAL | 9.8 | 0.4% | Oct 27, 2026 | The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to c... |
| CVE-2026-18449 | HIGH | 7.5 | 0.3% | Oct 27, 2026 | The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to c... |
| CVE-2026-16521 | HIGH | 7.2 | 0.9% | Oct 27, 2026 | An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command p... |
| CVE-2026-111461 | HIGH | 7.5 | 1.4% | Oct 27, 2026 | An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabl... |
| CVE-2026-111460 | HIGH | 7.7 | 0.3% | Oct 27, 2026 | A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauth... |
| CVE-2026-111459 | HIGH | 7.6 | 0.2% | Oct 27, 2026 | An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditi... |
| CVE-2026-10511 | MEDIUM | 6.4 | 0.2% | Oct 27, 2026 | The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'forget_password_link' para... |
| CVE-2026-107472 | MEDIUM | 4.3 | 0.1% | Oct 27, 2026 | An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Q... |
| CVE-2026-101034 | MEDIUM | 6.8 | 0.1% | Oct 27, 2026 | An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and ... |
| CVE-2026-75891 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all versions up to, and... |