CVE Vulnerability Database
Search and browse 423,895 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109702 | HIGH | 7.1 | — | Oct 15, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maxfoundry Social ... |
| CVE-2026-109698 | CRITICAL | 9.3 | — | Oct 15, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kitae Park Mang Bo... |
| CVE-2026-109693 | HIGH | 8.8 | 0.3% | Oct 15, 2026 | Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.Thi... |
| CVE-2026-109692 | HIGH | 7.1 | — | Oct 15, 2026 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Conf... |
| CVE-2026-109688 | CRITICAL | 9.3 | — | Oct 15, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC L... |
| CVE-2026-109686 | CRITICAL | 9.8 | — | Oct 15, 2026 | Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injecti... |
| CVE-2026-109685 | HIGH | 7.1 | 0.1% | Oct 15, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Whisper INC L... |
| CVE-2026-107416 | HIGH | 7.5 | — | Oct 15, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-booking-lite allows ... |
| CVE-2026-105882 | MEDIUM | 6.5 | — | Oct 15, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill User Re... |
| CVE-2026-104025 | HIGH | 8.4 | 0.2% | Oct 15, 2026 | Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlie... |
| CVE-2026-102389 | MEDIUM | 6.5 | — | Oct 15, 2026 | Improper Control of Generation of Code ('Code Injection') vulnerability in WPMU DEV Broken Link Checker broken-link-chec... |
| CVE-2026-8145 | MEDIUM | 5.4 | — | Oct 15, 2026 | The WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices plugin for WordPress is vulnerable to Limi... |
| CVE-2026-79836 | MEDIUM | 6.4 | — | Oct 15, 2026 | A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer... |
| CVE-2026-79835 | LOW | 2.8 | — | Oct 15, 2026 | A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server. |
| CVE-2026-79834 | HIGH | 7.4 | — | Oct 15, 2026 | A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command ... |
| CVE-2026-110726 | MEDIUM | 6.5 | — | Oct 15, 2026 | In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-clie... |
| CVE-2026-79833 | HIGH | 7.5 | — | Oct 15, 2026 | A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to ter... |
| CVE-2026-79832 | HIGH | 7.6 | — | Oct 15, 2026 | A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or... |
| CVE-2026-79831 | MEDIUM | 6.6 | — | Oct 15, 2026 | A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution. |
| CVE-2026-79830 | MEDIUM | 6.6 | — | Oct 15, 2026 | A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary c... |
| CVE-2026-17525 | MEDIUM | 5.2 | 0.1% | Oct 15, 2026 | Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5. |
| CVE-2026-109695 | HIGH | 7.5 | — | Oct 15, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in WPManageNinja FluentCart fluent-cart allows Retrieve ... |
| CVE-2026-109694 | CRITICAL | 9.8 | — | Oct 15, 2026 | Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.Thi... |
| CVE-2026-108498 | HIGH | 7.1 | — | Oct 15, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bannersky BSK PDF ... |
| CVE-2026-108497 | CRITICAL | 9.3 | 0.2% | Oct 15, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliab... |