CVE Vulnerability Database
Search and browse 420,607 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-113779 | HIGH | 8.8 | 0.4% | Oct 21, 2026 | The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewall... |
| CVE-2026-112221 | HIGH | 7.1 | — | Oct 21, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S... |
| CVE-2026-111852 | CRITICAL | 9.3 | — | Oct 21, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdreams Ajax Sear... |
| CVE-2026-111848 | HIGH | 7.1 | — | Oct 21, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Ma... |
| CVE-2026-111840 | HIGH | 7.1 | — | Oct 21, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com P... |
| CVE-2026-111838 | HIGH | 7.1 | — | Oct 21, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk ThemeHun... |
| CVE-2026-111837 | MEDIUM | 6.5 | — | Oct 21, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker C... |
| CVE-2026-111835 | MEDIUM | 6.5 | — | Oct 21, 2026 | Missing Authorization vulnerability in bjorntech BjornTech Swish for WooCommerce woo-swish-e-commerce allows Exploiting ... |
| CVE-2026-111834 | CRITICAL | 9.9 | — | Oct 21, 2026 | Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web ... |
| CVE-2026-111833 | HIGH | 7.5 | — | Oct 21, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bold Grid weForms weform... |
| CVE-2026-111832 | CRITICAL | 10 | — | Oct 21, 2026 | Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web... |
| CVE-2025-60497 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers t... |
| CVE-2025-60493 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows... |
| CVE-2025-60492 | MEDIUM | 5.5 | 0.3% | Oct 21, 2026 | A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box before 2.5 allows attack... |
| CVE-2025-60491 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows ... |
| CVE-2025-60490 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC Project/MP... |
| CVE-2025-60487 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4Box before 2.5 allow... |
| CVE-2025-60478 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Project/MP4Box before 2.5 ... |
| CVE-2023-7356 | HIGH | 8.8 | 0.3% | Oct 21, 2026 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches E... |
| CVE-2026-114437 | MEDIUM | 4.8 | — | Oct 21, 2026 | In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configured trusted ... |
| CVE-2026-114249 | HIGH | 7.3 | 0.3% | Oct 21, 2026 | A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362... |
| CVE-2026-109619 | HIGH | 8.1 | 100.0% | Oct 21, 2026 | PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be cor... |
| CVE-2026-109618 | CRITICAL | 9.8 | 100.0% | Oct 21, 2026 | PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some co... |
| CVE-2026-104949 | MEDIUM | 5.4 | 0.2% | Oct 21, 2026 | WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (... |
| CVE-2026-104948 | HIGH | 7.1 | 0.2% | Oct 21, 2026 | WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (... |