CVE Vulnerability Database
Search and browse 420,610 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105998 | MEDIUM | 5.3 | 0.2% | Oct 21, 2026 | The Booking Package WordPress plugin before 1.7.31 does not perform any authorization or validity check before resetting... |
| CVE-2026-105996 | MEDIUM | 4.8 | 0.1% | Oct 21, 2026 | The Booking Package WordPress plugin before 1.7.31 does not generate booking cancellation tokens using a secure source o... |
| CVE-2026-105992 | MEDIUM | 5.3 | 0.2% | Oct 21, 2026 | The Ettrick Escape Room Booking WordPress plugin before 1.3.1 does not verify a booking's payment status against the pay... |
| CVE-2026-105262 | HIGH | 8 | 0.2% | Oct 21, 2026 | The Falang multilanguage for WordPress plugin before 1.4.6 does not perform a capability check when saving term translat... |
| CVE-2026-105257 | LOW | 2.7 | 0.1% | Oct 21, 2026 | The Appointment Booking Plugin WordPress plugin before 5.7.5 does not verify that an authenticated agent-level user is ... |
| CVE-2026-103302 | MEDIUM | 5.3 | 0.2% | Oct 21, 2026 | The Payment Gateway for Idram WordPress plugin before 2.1.6 does not verify the authenticity of incoming payment notific... |
| CVE-2026-102499 | HIGH | 7.7 | 0.2% | Oct 21, 2026 | The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0... |
| CVE-2026-100145 | MEDIUM | 6.5 | 0.2% | Oct 21, 2026 | The Synchrony Financing WordPress plugin before 1.1.2 does not properly authorise requests to one of its REST routes tha... |
| CVE-2026-82819 | HIGH | 7.1 | 0.5% | Oct 21, 2026 | A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manip... |
| CVE-2026-92824 | MEDIUM | 6.2 | 0.1% | Oct 21, 2026 | A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count... |
| CVE-2026-92823 | MEDIUM | 6.2 | 0.2% | Oct 21, 2026 | A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through ... |
| CVE-2026-92822 | MEDIUM | 6.2 | 0.2% | Oct 21, 2026 | A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values th... |
| CVE-2026-114040 | LOW | 3.5 | — | Oct 21, 2026 | A security vulnerability has been detected in DT42 BerryNet up to 3.10.2. The affected element is the function DLModelMa... |
| CVE-2026-114039 | MEDIUM | 6.3 | 0.2% | Oct 21, 2026 | A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is the function mysqli_... |
| CVE-2026-82814 | HIGH | 8.8 | 0.5% | Oct 21, 2026 | The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, an... |
| CVE-2026-113744 | CRITICAL | 10 | 0.6% | Oct 21, 2026 | A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewa... |
| CVE-2026-113743 | MEDIUM | 6.3 | 0.4% | Oct 21, 2026 | A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_... |
| CVE-2026-114198 | HIGH | 8.7 | 0.1% | Oct 21, 2026 | Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a c... |
| CVE-2026-114197 | HIGH | 8.7 | 0.1% | Oct 21, 2026 | Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a c... |
| CVE-2026-114119 | CRITICAL | 9.8 | 0.4% | Oct 21, 2026 | Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that ... |
| CVE-2026-114118 | MEDIUM | 4.8 | 0.2% | Oct 21, 2026 | Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint256 subtraction withou... |
| CVE-2026-114117 | MEDIUM | 5.9 | 0.2% | Oct 21, 2026 | Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which (msg.value | K) or (len(msg.data) | K), where ... |
| CVE-2026-114116 | MEDIUM | 5.3 | 0.2% | Oct 21, 2026 | Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines(), which treats... |
| CVE-2026-114115 | LOW | 3.7 | 0.2% | Oct 21, 2026 | Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse_IfExp that reads nested arrays wit... |
| CVE-2026-114114 | MEDIUM | 5.3 | 0.2% | Oct 21, 2026 | Vyper 0.1.0b1 before 0.1.0b12, 0.1.0b14, and 0.4.1 through 0.5.0b1 mix character-based line offsets with Python's UTF-8 ... |