CVE Vulnerability Database
Search and browse 423,865 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111444 | CRITICAL | 9.8 | 0.3% | Oct 16, 2026 | Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent)... |
| CVE-2026-111443 | MEDIUM | 6.5 | 0.2% | Oct 16, 2026 | Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, inc... |
| CVE-2026-111442 | MEDIUM | 5.3 | 0.2% | Oct 16, 2026 | Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG images to en... |
| CVE-2026-109990 | HIGH | 7.2 | 0.3% | Oct 16, 2026 | The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vulnerable to Stored Cr... |
| CVE-2026-109207 | HIGH | 7.2 | 0.3% | Oct 16, 2026 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is... |
| CVE-2026-107758 | HIGH | 7.2 | 0.4% | Oct 16, 2026 | The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter i... |
| CVE-2026-104769 | MEDIUM | 5.9 | 0.8% | Oct 16, 2026 | The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions u... |
| CVE-2026-104745 | HIGH | 8.1 | 0.5% | Oct 16, 2026 | The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the `alg_... |
| CVE-2026-103518 | MEDIUM | 4.9 | 0.4% | Oct 16, 2026 | The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to generic SQL I... |
| CVE-2026-111389 | HIGH | 7.7 | 0.2% | Oct 16, 2026 | Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL injection vulnerability in ... |
| CVE-2026-111388 | MEDIUM | 5.4 | 0.2% | Oct 16, 2026 | Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enforce the per-user restrict_ip allowlist for non-ses... |
| CVE-2026-111387 | MEDIUM | 6.5 | 0.3% | Oct 16, 2026 | Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retri... |
| CVE-2026-111386 | MEDIUM | 4.3 | — | Oct 16, 2026 | Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenticated members to enu... |
| CVE-2026-111385 | MEDIUM | 4.8 | 0.2% | Oct 16, 2026 | Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool that builds fs.downloa... |
| CVE-2026-111384 | MEDIUM | 6.5 | 0.3% | Oct 16, 2026 | Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file manager WebSocket endpoint be... |
| CVE-2026-111383 | MEDIUM | 6.5 | 0.3% | Oct 16, 2026 | Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows authenticated users to open unb... |
| CVE-2026-111382 | HIGH | 8.8 | 0.3% | Oct 16, 2026 | FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_... |
| CVE-2026-111381 | HIGH | 7.3 | 0.1% | Oct 16, 2026 | FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local ... |
| CVE-2026-111380 | HIGH | 8.8 | 0.3% | Oct 16, 2026 | FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_mac.m, audin_ios.m), w... |
| CVE-2026-111379 | HIGH | 7.3 | 0.2% | Oct 16, 2026 | FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local ... |
| CVE-2026-111378 | HIGH | 7.5 | 0.3% | Oct 16, 2026 | FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that ... |
| CVE-2026-111377 | MEDIUM | 6.5 | 0.2% | Oct 16, 2026 | FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to e... |
| CVE-2026-111376 | MEDIUM | 5 | 0.1% | Oct 16, 2026 | FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStream... |
| CVE-2026-111375 | CRITICAL | 9.1 | 0.2% | Oct 16, 2026 | FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL client that allows mal... |
| CVE-2026-111374 | MEDIUM | 5.3 | 0.2% | Oct 16, 2026 | FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client that lets malicious... |