CVE Vulnerability Database
Search and browse 423,492 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-94273 | MEDIUM | 5.3 | 0.1% | Oct 19, 2026 | The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms ... |
| CVE-2026-91047 | MEDIUM | 5.3 | 0.1% | Oct 19, 2026 | The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected Woo... |
| CVE-2026-91046 | MEDIUM | 4.3 | 0.1% | Oct 19, 2026 | The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt ex... |
| CVE-2026-89286 | MEDIUM | 5.3 | 0.1% | Oct 19, 2026 | The FormFlow for GoHighLevel (GHL) WordPress plugin through 1.0.0 does not restrict access to a log file it writes insi... |
| CVE-2026-76739 | MEDIUM | 4.3 | 0.2% | Oct 19, 2026 | A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server coul... |
| CVE-2026-16487 | — | — | 0.2% | Oct 19, 2026 | Rejected reason: Red Hat Product Security has determined that this is not a vulnerability in bootc or containers-common.... |
| CVE-2026-112086 | MEDIUM | 6.3 | 0.3% | Oct 19, 2026 | A vulnerability was found in ESPnet up to 202610.post2. This affects the function build_model of the file espnet3/public... |
| CVE-2026-112083 | MEDIUM | 5.3 | 0.4% | Oct 19, 2026 | A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.send_wei... |
| CVE-2026-112082 | HIGH | 7.5 | 0.6% | Oct 19, 2026 | A vulnerability was identified in sgl-project SGLang up to 0.5.19. This impacts the function Scheduler.expert_distributi... |
| CVE-2026-112081 | MEDIUM | 6.3 | 0.3% | Oct 19, 2026 | A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. This affects the function hanlp.load of the file plu... |
| CVE-2026-108121 | MEDIUM | 6.9 | 0.3% | Oct 19, 2026 | Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's S... |
| CVE-2026-108120 | HIGH | 7.7 | 0.4% | Oct 19, 2026 | Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koo... |
| CVE-2026-106933 | MEDIUM | 6.8 | 0.2% | Oct 19, 2026 | The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME t... |
| CVE-2026-106028 | MEDIUM | 5.3 | 0.1% | Oct 19, 2026 | The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating ... |
| CVE-2026-106014 | MEDIUM | 5.3 | 0.1% | Oct 19, 2026 | The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the payment notification... |
| CVE-2026-112080 | MEDIUM | 6.3 | 0.3% | Oct 19, 2026 | A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted ele... |
| CVE-2026-112079 | MEDIUM | 6.3 | 0.3% | Oct 19, 2026 | A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function load_word2vec_a... |
| CVE-2026-112078 | MEDIUM | 6.3 | 0.2% | Oct 19, 2026 | A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function c... |
| CVE-2026-112077 | MEDIUM | 5.6 | 0.3% | Oct 19, 2026 | A vulnerability was detected in radareorg radare2 6.2.0/6.2.2. This issue affects the function r_core_cmd_str_pipe in th... |
| CVE-2026-112076 | MEDIUM | 5.6 | 0.3% | Oct 19, 2026 | A security vulnerability has been detected in alexta69 MeTube up to 2026.09.28. This vulnerability affects the function ... |
| CVE-2026-112075 | MEDIUM | 6.3 | 0.3% | Oct 19, 2026 | A weakness has been identified in unslothai unsloth up to 0.1.501-beta. This affects the function FastSentenceTransforme... |
| CVE-2026-112074 | MEDIUM | 6.3 | 0.2% | Oct 19, 2026 | A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this iss... |
| CVE-2026-112073 | MEDIUM | 6.3 | 0.2% | Oct 19, 2026 | A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this vulnerab... |
| CVE-2026-112045 | MEDIUM | 5.4 | 0.2% | Oct 19, 2026 | A vulnerability was detected in donetick up to 0.1.82. The impacted element is the function CanDeleteHistory of the file... |
| CVE-2026-111440 | HIGH | 7 | 0.2% | Oct 19, 2026 | 在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactory.java 中，LogFactory 根据 JDBC 连接参数中的 logger ... |