CVE Vulnerability Database
Search and browse 383,224 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-56847 | MEDIUM | 6.1 | 0.2% | Jul 30, 2026 | A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside ... |
| CVE-2026-47882 | HIGH | 8.3 | 0.2% | Jul 30, 2026 | When enabling Spring Boot DevTools support for a remote application target (for example a Docker container or Cloud Foun... |
| CVE-2026-47873 | HIGH | 8 | 0.2% | Jul 30, 2026 | The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network int... |
| CVE-2026-47858 | HIGH | 8 | 0.2% | Jul 30, 2026 | Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running applicati... |
| CVE-2026-16531 | MEDIUM | 5.3 | 0.4% | Jul 30, 2026 | An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a ... |
| CVE-2026-16530 | MEDIUM | 6.5 | 0.3% | Jul 30, 2026 | A flaw was found in the PCP (Performance Co-Pilot) `pmproxy` service. A remote attacker can exploit a vulnerability in t... |
| CVE-2026-16529 | HIGH | 7.5 | 0.4% | Jul 30, 2026 | A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU proce... |
| CVE-2026-16527 | HIGH | 7.3 | 0.5% | Jul 30, 2026 | An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endp... |
| CVE-2026-16526 | HIGH | 8.8 | 0.5% | Jul 30, 2026 | A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution... |
| CVE-2026-16524 | HIGH | 7.8 | 0.7% | Jul 30, 2026 | A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.fil... |
| CVE-2026-15382 | MEDIUM | 6.5 | 0.2% | Jul 30, 2026 | The Ultimate Addons for WPBakery Page Builder WordPress plugin before 3.21.4 does not perform a capability or nonce chec... |
| CVE-2026-15257 | MEDIUM | 5.3 | 0.1% | Jul 30, 2026 | The RegistrationMagic WordPress plugin before 6.0.9.4 does not perform authorization, ownership or nonce checks on a fr... |
| CVE-2026-15255 | MEDIUM | 5.3 | 0.1% | Jul 30, 2026 | The RegistrationMagic WordPress plugin before 6.0.9.4 does not properly validate that a one-time password presented in ... |
| CVE-2026-15252 | MEDIUM | 5.4 | 0.1% | Jul 30, 2026 | The Search Atlas SEO WordPress plugin before 2.6.12 does not perform a capability or nonce check in one of its AJAX han... |
| CVE-2026-15250 | MEDIUM | 5.3 | 0.2% | Jul 30, 2026 | The Appointment Booking Plugin WordPress plugin before 5.6.8 does not restrict which booking fields an unauthenticated ... |
| CVE-2026-15240 | HIGH | 7.5 | 0.1% | Jul 30, 2026 | The Customer Switching WordPress plugin before 2.1.3 does not securely bind an active user-switching session to the oper... |
| CVE-2026-15235 | MEDIUM | 4.3 | 0.2% | Jul 30, 2026 | The MotoPress Hotel Booking WordPress plugin before 6.0.4 does not perform a capability check before returning a booking... |
| CVE-2026-15153 | MEDIUM | 6.8 | 0.2% | Jul 30, 2026 | The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative ... |
| CVE-2026-15054 | LOW | 3.7 | 0.2% | Jul 30, 2026 | The Bit Form WordPress plugin before 3.1.2 does not enforce a form's active/published status on its public form-submiss... |
| CVE-2026-14923 | MEDIUM | 6.5 | 0.1% | Jul 30, 2026 | The Sync Post With Other Site WordPress plugin before 1.9.3 does not correctly enforce the page-editing capability on a ... |
| CVE-2026-14602 | CRITICAL | 9 | 0.3% | Jul 30, 2026 | The Remote API WordPress plugin through 0.2 does not authenticate a request before deserializing user-supplied input, al... |
| CVE-2026-14592 | MEDIUM | 6.1 | — | Jul 30, 2026 | The WP Real IP-based Access Control WordPress plugin through 1.3.1 does not perform any capability or nonce checks befor... |
| CVE-2026-14318 | MEDIUM | 6.8 | 0.2% | Jul 30, 2026 | The GiveWP WordPress plugin before 4.16.3 does not escape a donation-form template setting before outputting it in an H... |
| CVE-2026-14310 | MEDIUM | 5.4 | — | Jul 30, 2026 | The Tutor LMS WordPress plugin before 4.0.0 does not properly verify that a user has access to the course a Q&A thread ... |
| CVE-2026-14305 | MEDIUM | 5.3 | — | Jul 30, 2026 | The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, all... |