CVE Vulnerability Database
Search and browse 420,590 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-48015 | HIGH | 7.5 | 0.6% | Oct 22, 2026 | JeeWMS before commit 0a610e8 contains an unauthenticated path traversal vulnerability that allows remote attackers to re... |
| CVE-2021-48014 | CRITICAL | 9.8 | 1.7% | Oct 22, 2026 | FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer design_save_svg operation that all... |
| CVE-2021-48013 | HIGH | 7.5 | 0.7% | Oct 22, 2026 | Weaver E-cology 8.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary file... |
| CVE-2020-37284 | MEDIUM | 6.1 | 0.2% | Oct 22, 2026 | Sickbeard through build-507 contains a reflected cross-site scripting vulnerability that allows unauthenticated attacker... |
| CVE-2019-25779 | HIGH | 7.5 | 0.4% | Oct 22, 2026 | WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitra... |
| CVE-2019-25778 | HIGH | 8.2 | 0.4% | Oct 22, 2026 | SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate da... |
| CVE-2018-25439 | HIGH | 7.5 | 0.5% | Oct 22, 2026 | MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that allows unauthenticated... |
| CVE-2018-25438 | HIGH | 7.5 | 0.5% | Oct 22, 2026 | Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that ... |
| CVE-2017-20290 | MEDIUM | 6.1 | 0.3% | Oct 22, 2026 | Discourse 1.9.0.beta2 before 1.9.0.beta13 contains a reflected cross-site scripting vulnerability that allows unauthenti... |
| CVE-2017-20289 | HIGH | 7.5 | 0.8% | Oct 22, 2026 | Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability that allows... |
| CVE-2017-20288 | MEDIUM | 6.1 | 0.3% | Oct 22, 2026 | QCubed 2.2.0 through 3.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers... |
| CVE-2017-20287 | HIGH | 7.5 | 0.4% | Oct 22, 2026 | Javo Spot theme for WordPress before 3.0.0 contains a path traversal vulnerability that allows unauthenticated attackers... |
| CVE-2026-114348 | MEDIUM | 5.3 | 0.3% | Oct 22, 2026 | webpack-dev-server is a development server that provides live reloading for webpack projects. In versions from 5.1.0 bef... |
| CVE-2026-112085 | HIGH | 8.2 | 0.1% | Oct 22, 2026 | webpack-dev-server is a development server that provides live reloading for webpack projects. In versions before 5.2.7 a... |
| CVE-2026-106017 | MEDIUM | 6.3 | 0.2% | Oct 22, 2026 | Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent ... |
| CVE-2026-96293 | MEDIUM | 6.9 | 0.1% | Oct 22, 2026 | A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption featur... |
| CVE-2026-93471 | HIGH | 8.7 | 0.4% | Oct 22, 2026 | Improper Handling of Highly Compressed Data (Data Amplification) in esaml_binding in dropbox esaml allows an unauthentic... |
| CVE-2026-86696 | HIGH | 8.2 | 0.4% | Oct 22, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated a... |
| CVE-2026-21812 | LOW | 2.2 | 0.1% | Oct 22, 2026 | HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when conf... |
| CVE-2026-21811 | LOW | 3.8 | 0.2% | Oct 22, 2026 | HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets acc... |
| CVE-2026-115253 | HIGH | 7.3 | 0.1% | Oct 22, 2026 | An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated n... |
| CVE-2026-114703 | MEDIUM | 6.5 | 0.1% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions ... |
| CVE-2026-114702 | MEDIUM | 6.5 | 0.1% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicdark ND Shortco... |
| CVE-2026-114701 | MEDIUM | 6.5 | 0.1% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xootix Waitlist Wo... |
| CVE-2026-114700 | MEDIUM | 6.5 | 0.1% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gloriafood Restaur... |