CVE Vulnerability Database
Search and browse 384,590 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-11354 | MEDIUM | 5.3 | 0.2% | Jul 24, 2026 | The Participants Database plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, an... |
| CVE-2025-9205 | MEDIUM | 6.4 | 0.2% | Jul 24, 2026 | The MapSVG plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 8.14.... |
| CVE-2026-62825 | CRITICAL | 9.8 | 0.7% | Jul 24, 2026 | Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-58275 | CRITICAL | 9.8 | 0.7% | Jul 24, 2026 | Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-56191 | CRITICAL | 10 | 0.7% | Jul 24, 2026 | Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network... |
| CVE-2026-56167 | HIGH | 8.8 | 0.4% | Jul 24, 2026 | Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network... |
| CVE-2026-56165 | CRITICAL | 9.8 | 0.7% | Jul 24, 2026 | Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network. |
| CVE-2026-56160 | CRITICAL | 9.9 | 0.7% | Jul 24, 2026 | Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a netwo... |
| CVE-2026-54120 | HIGH | 8.8 | 0.7% | Jul 24, 2026 | Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network. |
| CVE-2026-50517 | CRITICAL | 9.9 | 1.3% | Jul 24, 2026 | Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network. |
| CVE-2026-49159 | MEDIUM | 6.5 | 0.6% | Jul 24, 2026 | Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose ... |
| CVE-2026-35425 | HIGH | 7.2 | 0.5% | Jul 24, 2026 | Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network. |
| CVE-2026-50044 | HIGH | 7.6 | 0.1% | Jul 23, 2026 | Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability which could allow an... |
| CVE-2026-44955 | MEDIUM | 6.9 | 0.2% | Jul 23, 2026 | Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized contr... |
| CVE-2026-42933 | CRITICAL | 10 | 0.3% | Jul 23, 2026 | Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow ... |
| CVE-2026-40430 | HIGH | 8.7 | 0.2% | Jul 23, 2026 | Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cl... |
| CVE-2026-28698 | CRITICAL | 9.2 | 0.3% | Jul 23, 2026 | Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized contr... |
| CVE-2026-16767 | MEDIUM | 6.5 | 0.5% | Jul 23, 2026 | A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile::extractTo of the file sr... |
| CVE-2026-65694 | HIGH | 8.7 | 0.8% | Jul 23, 2026 | Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file controller that allows unauthen... |
| CVE-2026-65604 | HIGH | 8.8 | 0.3% | Jul 23, 2026 | Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent (OPA) d... |
| CVE-2026-63732 | CRITICAL | 9.9 | 0.7% | Jul 23, 2026 | 9router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default password (123456) that authent... |
| CVE-2026-63313 | HIGH | 8.3 | 0.3% | Jul 23, 2026 | 9Router before 0.4.72 contains a server-side request forgery (SSRF) vulnerability in the /v1/web/fetch endpoint. The end... |
| CVE-2026-16807 | HIGH | 8.8 | 0.3% | Jul 23, 2026 | Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform ... |
| CVE-2026-16806 | HIGH | 8.8 | 0.4% | Jul 23, 2026 | Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code in... |
| CVE-2026-16805 | HIGH | 8.8 | 0.3% | Jul 23, 2026 | Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code ins... |