CVE Vulnerability Database
Search and browse 423,888 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110877 | MEDIUM | 5.5 | 0.1% | Oct 15, 2026 | AdPlug through 2.4 contains a heap out-of-bounds read vulnerability in CdmoLoader::load() in src/dmo.cpp that allows att... |
| CVE-2026-110876 | MEDIUM | 5.5 | 0.1% | Oct 15, 2026 | AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before note... |
| CVE-2026-110875 | MEDIUM | 6.1 | 0.1% | Oct 15, 2026 | AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update() in src/ksm.cpp that writes past the fix... |
| CVE-2026-110874 | MEDIUM | 6.6 | — | Oct 15, 2026 | Dolibarr before 23.0.4 contains a PHP object injection vulnerability in jsonOrUnserialize() in functions.lib.php, which ... |
| CVE-2026-110378 | MEDIUM | 5.3 | — | Oct 15, 2026 | Missing Authorization vulnerability in WP E-Signature Ninja Forms Signature Contract Add-On ninja-signature-contract-for... |
| CVE-2026-110375 | MEDIUM | 6.5 | 0.2% | Oct 15, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Download ... |
| CVE-2026-110374 | MEDIUM | 4.3 | — | Oct 15, 2026 | Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting In... |
| CVE-2026-110364 | MEDIUM | 5.3 | — | Oct 15, 2026 | Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible... |
| CVE-2026-110362 | MEDIUM | 5.3 | 0.2% | Oct 15, 2026 | Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payment-gateway allows Ex... |
| CVE-2026-110361 | MEDIUM | 6.5 | — | Oct 15, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in ClikIT Infinite Uploads infinite-uploads allows Retri... |
| CVE-2026-110360 | MEDIUM | 5.3 | 0.2% | Oct 15, 2026 | Missing Authorization vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Exploiting Incorrectly Configur... |
| CVE-2026-109932 | HIGH | 7.5 | 0.3% | Oct 15, 2026 | undici is an HTTP client library for Node.js. In versions 5.15.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through... |
| CVE-2026-109924 | HIGH | 7.5 | 0.3% | Oct 15, 2026 | undici is an HTTP client library for Node.js. In versions 6.5.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through ... |
| CVE-2026-109897 | MEDIUM | 5.4 | — | Oct 15, 2026 | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Co... |
| CVE-2026-109893 | MEDIUM | 6.5 | 0.2% | Oct 15, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force P... |
| CVE-2026-109869 | HIGH | 7.5 | 0.3% | Oct 15, 2026 | undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 throug... |
| CVE-2026-109841 | HIGH | 7.5 | 0.3% | Oct 15, 2026 | undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch() im... |
| CVE-2026-109829 | CRITICAL | 9.1 | 0.1% | Oct 15, 2026 | undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originl... |
| CVE-2026-109689 | MEDIUM | 5.3 | — | Oct 15, 2026 | Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly... |
| CVE-2026-109383 | CRITICAL | 9.1 | 0.2% | Oct 15, 2026 | undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through ... |
| CVE-2026-109131 | MEDIUM | 5.4 | 0.2% | Oct 15, 2026 | The Hub collection module documentation renderer in the unified Ansible Automation Platform UI (built from upstream ansi... |
| CVE-2026-108499 | MEDIUM | 5.3 | — | Oct 15, 2026 | Missing Authorization vulnerability in WebberZone Knowledge Base knowledgebase allows Exploiting Incorrectly Configured ... |
| CVE-2026-108334 | HIGH | 7.4 | 0.3% | Oct 15, 2026 | A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicat... |
| CVE-2026-108126 | MEDIUM | 6 | 0.4% | Oct 15, 2026 | temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted payloads to the namespace they were encrypted for. When paylo... |
| CVE-2026-106701 | MEDIUM | 6.1 | 0.2% | Oct 15, 2026 | ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityCon... |