CVE Vulnerability Database
Search and browse 423,337 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-10136 | CRITICAL | 9.1 | 0.9% | Oct 20, 2026 | A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-... |
| CVE-2026-10135 | CRITICAL | 9.1 | 1.2% | Oct 20, 2026 | A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0... |
| CVE-2026-10133 | CRITICAL | 9.1 | 0.9% | Oct 20, 2026 | A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-... |
| CVE-2026-10132 | CRITICAL | 9.1 | 0.9% | Oct 20, 2026 | A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLIN... |
| CVE-2026-10131 | CRITICAL | 9.1 | 1.2% | Oct 20, 2026 | An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-... |
| CVE-2026-109576 | MEDIUM | 5.5 | 0.1% | Oct 20, 2026 | The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list ad... |
| CVE-2026-107929 | HIGH | 8.1 | 0.2% | Oct 20, 2026 | When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes (`... |
| CVE-2026-107928 | HIGH | 8.1 | 0.3% | Oct 20, 2026 | When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due... |
| CVE-2026-105960 | MEDIUM | 5.5 | 0.1% | Oct 20, 2026 | PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requ... |
| CVE-2026-103672 | HIGH | 7.1 | 0.1% | Oct 20, 2026 | The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then cop... |
| CVE-2026-101103 | MEDIUM | 5.5 | 0.1% | Oct 20, 2026 | The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold th... |
| CVE-2016-20104 | HIGH | 7.5 | 0.4% | Oct 20, 2026 | EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthe... |
| CVE-2016-20103 | HIGH | 7.5 | 0.4% | Oct 20, 2026 | Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers t... |
| CVE-2016-20102 | MEDIUM | 6.1 | 0.2% | Oct 20, 2026 | JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers t... |
| CVE-2016-20101 | HIGH | 8.1 | 0.4% | Oct 20, 2026 | Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated at... |
| CVE-2016-20100 | HIGH | 7.5 | 0.4% | Oct 20, 2026 | Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthen... |
| CVE-2015-20128 | HIGH | 8.2 | 0.3% | Oct 20, 2026 | FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate... |
| CVE-2015-20125 | HIGH | 7.5 | 0.4% | Oct 20, 2026 | Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated ... |
| CVE-2015-20124 | HIGH | 7.5 | 0.4% | Oct 20, 2026 | Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthent... |
| CVE-2015-20123 | HIGH | 7.5 | 0.4% | Oct 20, 2026 | Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated ... |
| CVE-2014-125134 | HIGH | 7.5 | 0.6% | Oct 20, 2026 | ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers t... |
| CVE-2014-125133 | HIGH | 7.5 | 0.7% | Oct 20, 2026 | NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attack... |
| CVE-2014-125132 | MEDIUM | 6.1 | 0.2% | Oct 20, 2026 | Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unaut... |
| CVE-2014-125131 | MEDIUM | 6.1 | 0.2% | Oct 20, 2026 | DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inj... |
| CVE-2012-20005 | MEDIUM | 6.1 | 0.2% | Oct 20, 2026 | SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthe... |