CVE Vulnerability Database
Search and browse 383,866 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-65441 | HIGH | 7.1 | 0.1% | Jul 27, 2026 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions. |
| CVE-2026-65440 | HIGH | 7.1 | 0.1% | Jul 27, 2026 | Unauthenticated Cross Site Scripting (XSS) in GetGenie <= 4.4.3 versions. |
| CVE-2026-65439 | HIGH | 7.1 | 0.1% | Jul 27, 2026 | Unauthenticated Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <=3.5.45 versions. |
| CVE-2026-65438 | HIGH | 7.1 | 0.1% | Jul 27, 2026 | Unauthenticated Cross Site Scripting (XSS) in Message Filter for Contact Form 7 <= 1.6.3.9 versions. |
| CVE-2026-65437 | HIGH | 7.1 | 0.1% | Jul 27, 2026 | Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <= 6.82 versions. |
| CVE-2026-61957 | HIGH | 7.1 | 0.1% | Jul 27, 2026 | Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions. |
| CVE-2026-61953 | HIGH | 7.2 | 0.2% | Jul 27, 2026 | Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions. |
| CVE-2026-51565 | MEDIUM | 6.1 | 0.3% | Jul 27, 2026 | Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8 allows remote attacker... |
| CVE-2025-63913 | HIGH | 7.5 | 0.1% | Jul 27, 2026 | An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI fu... |
| CVE-2026-59240 | MEDIUM | 6.9 | 0.3% | Jul 27, 2026 | The vulnerability involves an Insecure Direct Object Reference (IDOR) in the `DeleteNotificationController::delete()` me... |
| CVE-2026-55685 | HIGH | 7.5 | 0.6% | Jul 27, 2026 | React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauth... |
| CVE-2026-53669 | MEDIUM | 6.1 | 0.5% | Jul 27, 2026 | React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backsl... |
| CVE-2026-53668 | MEDIUM | 6.9 | 0.3% | Jul 27, 2026 | React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications that allow ... |
| CVE-2026-53667 | MEDIUM | 6.1 | 0.4% | Jul 27, 2026 | React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validatio... |
| CVE-2026-53666 | MEDIUM | 6.1 | 0.4% | Jul 27, 2026 | React Router is a router for React. In versions 6.4.0 through 7.17.0, if application code was written in a way that allo... |
| CVE-2026-51564 | MEDIUM | 4.9 | 0.3% | Jul 27, 2026 | An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external... |
| CVE-2026-51078 | HIGH | 7.5 | 0.2% | Jul 27, 2026 | An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the fil... |
| CVE-2026-51077 | HIGH | 7.5 | 0.2% | Jul 27, 2026 | SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlqu... |
| CVE-2021-32088 | CRITICAL | 9.8 | 0.3% | Jul 27, 2026 | An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-... |
| CVE-2021-32087 | HIGH | 8.8 | 0.3% | Jul 27, 2026 | An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credent... |
| CVE-2021-32086 | CRITICAL | 9.8 | 0.2% | Jul 27, 2026 | An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It uses a hardcoded symmetric encrypt... |
| CVE-2021-32085 | HIGH | 8.8 | 0.3% | Jul 27, 2026 | An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credent... |
| CVE-2021-32084 | CRITICAL | 9.8 | 0.3% | Jul 27, 2026 | An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. If a customer restricts access to the... |
| CVE-2026-66825 | MEDIUM | 6.9 | 0.3% | Jul 27, 2026 | Pivotick contains a cross-site scripting vulnerability in the sidebar property-list component. Values associated with li... |
| CVE-2026-66824 | CRITICAL | 9.2 | 0.3% | Jul 27, 2026 | A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the... |