CVE Vulnerability Database
Search and browse 423,492 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-104679 | HIGH | 7.1 | 0.1% | Oct 19, 2026 | VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially... |
| CVE-2026-112094 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxml_load_data o... |
| CVE-2026-112093 | MEDIUM | 4.3 | 0.3% | Oct 19, 2026 | A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a2... |
| CVE-2026-112092 | MEDIUM | 4.3 | 0.3% | Oct 19, 2026 | A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Th... |
| CVE-2026-112091 | MEDIUM | 5.3 | 0.3% | Oct 19, 2026 | A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0... |
| CVE-2026-112090 | MEDIUM | 6.3 | 0.2% | Oct 19, 2026 | A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013... |
| CVE-2026-111439 | MEDIUM | 4.3 | 0.3% | Oct 19, 2026 | 在 openGauss-server的 src/common/backend/utils/adt/genfile.cpp 模块中，内置函数 pg_read_binary_file_blocks() 存在权限校验逻辑缺陷。该函数在入口处仅校验... |
| CVE-2026-94294 | MEDIUM | 5.3 | 0.2% | Oct 19, 2026 | The App Builder WordPress plugin before 5.7.1 does not require authentication or authorisation before writing attacker-s... |
| CVE-2026-94272 | MEDIUM | 5.3 | 0.2% | Oct 19, 2026 | The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status co... |
| CVE-2026-94231 | MEDIUM | 5.3 | 0.2% | Oct 19, 2026 | The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, a... |
| CVE-2026-94230 | MEDIUM | 5.3 | 0.2% | Oct 19, 2026 | The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does no... |
| CVE-2026-94229 | MEDIUM | 5.3 | 0.2% | Oct 19, 2026 | The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its conf... |
| CVE-2026-94228 | MEDIUM | 5.3 | 0.2% | Oct 19, 2026 | The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the... |
| CVE-2026-91831 | LOW | 3.8 | 0.2% | Oct 19, 2026 | The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-... |
| CVE-2026-86791 | MEDIUM | 5.3 | 0.1% | Oct 19, 2026 | The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually c... |
| CVE-2026-76740 | HIGH | 7.2 | 0.4% | Oct 19, 2026 | A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 s... |
| CVE-2026-74922 | MEDIUM | 5.3 | 0.1% | Oct 19, 2026 | The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook ... |
| CVE-2026-74921 | MEDIUM | 6.8 | 0.2% | Oct 19, 2026 | The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes bef... |
| CVE-2026-16460 | HIGH | 7.4 | 0.1% | Oct 19, 2026 | A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's con... |
| CVE-2026-112089 | MEDIUM | 4.7 | 0.2% | Oct 19, 2026 | A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f3... |
| CVE-2026-112088 | MEDIUM | 6.3 | 0.2% | Oct 19, 2026 | A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c0... |
| CVE-2026-112087 | MEDIUM | 6.3 | 0.3% | Oct 19, 2026 | A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processi... |
| CVE-2026-110034 | LOW | 3.7 | 0.2% | Oct 19, 2026 | The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-am... |
| CVE-2026-106010 | MEDIUM | 5.3 | 0.2% | Oct 19, 2026 | The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify the credentials on its public payment-st... |
| CVE-2026-103311 | MEDIUM | 5.3 | 0.1% | Oct 19, 2026 | The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not verify the authenticity of... |