CVE Vulnerability Database
Search and browse 423,337 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-20004 | MEDIUM | 6.1 | 0.2% | Oct 20, 2026 | K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthentic... |
| CVE-2012-20003 | MEDIUM | 6.1 | 0.2% | Oct 20, 2026 | Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unau... |
| CVE-2012-20002 | HIGH | 7.5 | 0.5% | Oct 20, 2026 | TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthen... |
| CVE-2026-86413 | CRITICAL | 9.1 | 0.3% | Oct 20, 2026 | When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl coul... |
| CVE-2026-86412 | HIGH | 8.1 | 0.3% | Oct 20, 2026 | A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload. On the ne... |
| CVE-2026-86411 | CRITICAL | 9.1 | 0.2% | Oct 20, 2026 | An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP control connection that a previous easy ha... |
| CVE-2026-86410 | HIGH | 8.1 | 0.3% | Oct 20, 2026 | A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly u... |
| CVE-2026-86409 | HIGH | 8.1 | 0.3% | Oct 20, 2026 | Setting `CURLOPT_AWS_SIGV4` to NULL but does not disable SigV4 authentication, contrary to expectations and documentatio... |
| CVE-2026-113869 | MEDIUM | 5.4 | 0.3% | Oct 20, 2026 | When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decryp... |
| CVE-2026-113868 | MEDIUM | 5.3 | 0.4% | Oct 20, 2026 | When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was va... |
| CVE-2026-113867 | CRITICAL | 9.1 | 0.2% | Oct 20, 2026 | Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming request... |
| CVE-2026-113866 | MEDIUM | 5.9 | 0.4% | Oct 20, 2026 | When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service ov... |
| CVE-2026-113725 | HIGH | 7.8 | 0.2% | Oct 20, 2026 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escap... |
| CVE-2026-113724 | MEDIUM | 4.5 | 0.1% | Oct 20, 2026 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the safe_delete() deletion err... |
| CVE-2026-113723 | HIGH | 7.1 | 0.2% | Oct 20, 2026 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text ca... |
| CVE-2026-113722 | HIGH | 7.8 | 0.2% | Oct 20, 2026 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom... |
| CVE-2026-113721 | MEDIUM | 4.5 | 0.1% | Oct 20, 2026 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplateActivator._generate... |
| CVE-2026-113720 | MEDIUM | 4.4 | 0.1% | Oct 20, 2026 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses ... |
| CVE-2026-113719 | MEDIUM | 4.5 | 0.1% | Oct 20, 2026 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInstall._uninstall_previous... |
| CVE-2026-113718 | HIGH | 7.1 | 0.2% | Oct 20, 2026 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote()... |
| CVE-2026-113717 | LOW | 2.3 | 0.3% | Oct 20, 2026 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInvoke.get_pip_install_cmd(... |
| CVE-2026-113716 | MEDIUM | 4.5 | 0.1% | Oct 20, 2026 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the builtin creator calls ensu... |
| CVE-2026-113715 | LOW | 2 | 0.1% | Oct 20, 2026 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads ... |
| CVE-2026-112380 | CRITICAL | 9.9 | 0.4% | Oct 20, 2026 | Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operat... |
| CVE-2026-107692 | MEDIUM | 4.8 | 0.1% | Oct 20, 2026 | The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet after the... |