CVE Vulnerability Database
Search and browse 420,542 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-116237 | HIGH | 8.4 | 0.4% | Oct 26, 2026 | A vulnerability was found in Oray Pugongying X5 Pro 7.6.1. This affects an unknown part of the component Dnsmasq. Perfor... |
| CVE-2026-115958 | MEDIUM | 5.3 | — | Oct 26, 2026 | Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Inc... |
| CVE-2026-115949 | MEDIUM | 6.5 | — | Oct 26, 2026 | Missing Authorization vulnerability in WP Smart Widgets Better Post & Filter Widgets for Elementor better-post-filter-wi... |
| CVE-2026-115614 | MEDIUM | 5.3 | — | Oct 26, 2026 | Missing Authorization vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocomm... |
| CVE-2026-115613 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Image Gal... |
| CVE-2026-115602 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell... |
| CVE-2026-114709 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inser... |
| CVE-2026-112865 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elem... |
| CVE-2026-112250 | MEDIUM | 4.4 | 0.2% | Oct 26, 2026 | A vulnerability has been identified in BRAIN2 versions up to and including version 3.09. Under specific installation con... |
| CVE-2026-110377 | MEDIUM | 5.3 | — | Oct 26, 2026 | Missing Authorization vulnerability in VillaTheme Bopo – WooCommerce Product Bundle Builder bopo-woo-product-bundle-buil... |
| CVE-2026-103377 | MEDIUM | 5.1 | 0.5% | Oct 26, 2026 | A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the web application of the Castile-La Mancha... |
| CVE-2026-95664 | MEDIUM | 5.4 | 0.8% | Oct 26, 2026 | Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') v... |
| CVE-2026-95663 | MEDIUM | 6.5 | 0.2% | Oct 26, 2026 | Insufficient Session Expiration vulnerability in Apache Camel Keycloak component. This issue affects Apache Camel: fr... |
| CVE-2026-95629 | MEDIUM | 5.4 | 0.3% | Oct 26, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Docling com... |
| CVE-2026-95628 | MEDIUM | 5.4 | 0.3% | Oct 26, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Docling com... |
| CVE-2026-82947 | HIGH | 7.1 | 0.2% | Oct 26, 2026 | SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicious device can cause ... |
| CVE-2026-82946 | MEDIUM | 6.5 | 0.2% | Oct 26, 2026 | SOEM version 2.0.0 and earlier contains a vulnerability where a malicious device can crash the master system. When the s... |
| CVE-2026-82945 | MEDIUM | 6.5 | 0.2% | Oct 26, 2026 | SOEM version 2.0.0 and earlier contains a vulnerability during device configuration where a malicious device can cause m... |
| CVE-2026-82944 | HIGH | 8.8 | 0.2% | Oct 26, 2026 | SOEM version 2.0.0 and earlier contains a vulnerability in multi-segment data transfers where a malicious device can ove... |
| CVE-2026-82943 | MEDIUM | 6.5 | 0.2% | Oct 26, 2026 | SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages that cause the master... |
| CVE-2026-70388 | HIGH | 8.3 | 0.2% | Oct 26, 2026 | SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially craft... |
| CVE-2026-116372 | HIGH | 7.7 | 0.4% | Oct 26, 2026 | MISP mispguard is a security filtering proxy that inspects and blocks MISP feed responses based on configured rules. The... |
| CVE-2026-116236 | HIGH | 7.2 | 0.4% | Oct 26, 2026 | A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is the function plugin_init of th... |
| CVE-2026-116235 | CRITICAL | 9.1 | 0.6% | Oct 26, 2026 | A flaw has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this vulnerability is an unknown functionality of the... |
| CVE-2026-116234 | CRITICAL | 9.1 | 0.5% | Oct 26, 2026 | A vulnerability was detected in Oray Pugongying X5 Pro 7.6.1. Affected is an unknown function of the file /etc/ipsec.con... |