CVE Vulnerability Database
Search and browse 383,941 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-59529 | HIGH | 7.5 | — | Jul 27, 2026 | Unauthenticated Sensitive Data Exposure in Ebook Store <= 6.19 versions. |
| CVE-2026-59528 | HIGH | 7.5 | — | Jul 27, 2026 | Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates <= 1.1.1 versions. |
| CVE-2026-59527 | CRITICAL | 9.3 | — | Jul 27, 2026 | Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. |
| CVE-2026-10819 | MEDIUM | 6.5 | 0.2% | Jul 27, 2026 | Mattermost versions 11.6.x <= 11.6.5, 10.11.x <= 10.11.20, 11.8.x <= 11.8.1, 11.7.x <= 11.7.4 fail to limit the number o... |
| CVE-2026-10600 | MEDIUM | 4.3 | 0.2% | Jul 27, 2026 | Mattermost versions 11.8.x <= 11.8.0, 11.7.x <= 11.7.3, 11.6.x <= 11.6.5, 10.11.x <= 10.11.20 fail to bound the time and... |
| CVE-2025-59181 | MEDIUM | 4.8 | 0.3% | Jul 27, 2026 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a directory traversal vulnerability in Configuratio... |
| CVE-2025-59180 | MEDIUM | 5.1 | 0.1% | Jul 27, 2026 | Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm s... |
| CVE-2025-59178 | MEDIUM | 4.8 | 0.1% | Jul 27, 2026 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnera... |
| CVE-2025-59177 | MEDIUM | 6.8 | 0.1% | Jul 27, 2026 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowi... |
| CVE-2025-59172 | HIGH | 8.5 | 0.2% | Jul 27, 2026 | Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vuln... |
| CVE-2026-65879 | CRITICAL | 9.8 | 0.1% | Jul 27, 2026 | Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder <... |
| CVE-2026-65878 | HIGH | 8.3 | — | Jul 27, 2026 | Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1- Improper path valida... |
| CVE-2026-65877 | HIGH | 8.2 | — | Jul 27, 2026 | Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of var... |
| CVE-2026-65876 | CRITICAL | 9.2 | 0.2% | Jul 27, 2026 | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0 - Improper validation of c... |
| CVE-2026-65766 | CRITICAL | 9.2 | — | Jul 27, 2026 | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of o... |
| CVE-2026-61511 | CRITICAL | 9.8 | 1.3% | Jul 27, 2026 | vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::... |
| CVE-2026-17514 | MEDIUM | 5.3 | — | Jul 27, 2026 | A vulnerability was determined in ZJONSSON node-unzipper up to 0.12.3. Affected by this vulnerability is the function Ex... |
| CVE-2026-17513 | LOW | 3.3 | — | Jul 27, 2026 | A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggml_ftype_to_ggml_type of the file... |
| CVE-2026-15003 | MEDIUM | 5.6 | 0.1% | Jul 27, 2026 | A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125... |
| CVE-2026-59690 | HIGH | 8 | 0.2% | Jul 27, 2026 | A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection M... |
| CVE-2026-59689 | HIGH | 8 | 0.2% | Jul 27, 2026 | An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connectio... |
| CVE-2026-59688 | HIGH | 8.4 | 0.7% | Jul 27, 2026 | An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection M... |
| CVE-2026-59687 | HIGH | 8.4 | 0.7% | Jul 27, 2026 | An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection M... |
| CVE-2026-59686 | HIGH | 8.4 | 0.7% | Jul 27, 2026 | An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection M... |
| CVE-2026-56538 | LOW | 3.5 | 0.2% | Jul 27, 2026 | An endpoint in HCL Connections is vulnerable to information disclosure. In certain scenarios this might lead to disclosi... |