CVE Vulnerability Database
Search and browse 423,902 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-101311 | HIGH | 7 | 0.2% | Oct 15, 2026 | The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and ... |
| CVE-2026-101310 | HIGH | 7 | 0.2% | Oct 15, 2026 | The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream. A... |
| CVE-2026-101309 | HIGH | 7 | 0.2% | Oct 15, 2026 | The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest. The size was re-read ... |
| CVE-2026-96537 | HIGH | 7.5 | 0.1% | Oct 15, 2026 | The Tutor LMS WordPress plugin before 4.1.1 does not perform a capability check in a routine that regenerates its manag... |
| CVE-2026-92429 | MEDIUM | 5.3 | 0.1% | Oct 15, 2026 | The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhoo... |
| CVE-2026-92428 | MEDIUM | 5.3 | 0.1% | Oct 15, 2026 | The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhoo... |
| CVE-2026-81534 | HIGH | 8.8 | 0.5% | Oct 15, 2026 | The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to... |
| CVE-2026-79822 | HIGH | 7.1 | 0.1% | Oct 15, 2026 | A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect ex... |
| CVE-2026-79821 | HIGH | 8.2 | 0.2% | Oct 15, 2026 | A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down. |
| CVE-2026-76668 | MEDIUM | 6.3 | 0.1% | Oct 15, 2026 | A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data. |
| CVE-2026-74920 | HIGH | 7.1 | 0.2% | Oct 15, 2026 | The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflecting i... |
| CVE-2026-58100 | HIGH | 7 | 0.1% | Oct 15, 2026 | kqueue_fork_copy_knote() indexed into the child's file descriptor table using a knote's file descriptor number without a... |
| CVE-2026-58099 | HIGH | 7 | 0.1% | Oct 15, 2026 | When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes (used interna... |
| CVE-2026-58098 | HIGH | 8.4 | 0.2% | Oct 15, 2026 | When semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps. Upon waking, it checks... |
| CVE-2026-41544 | HIGH | 8.7 | 0.4% | Oct 15, 2026 | A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they ca... |
| CVE-2026-39993 | HIGH | 8.7 | 0.4% | Oct 15, 2026 | A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user ... |
| CVE-2026-24723 | MEDIUM | 6.5 | 0.3% | Oct 15, 2026 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a... |
| CVE-2026-24722 | MEDIUM | 6.5 | 0.3% | Oct 15, 2026 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a... |
| CVE-2026-24721 | MEDIUM | 6.5 | 0.3% | Oct 15, 2026 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a... |
| CVE-2026-24718 | MEDIUM | 5.3 | 0.4% | Oct 15, 2026 | A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the... |
| CVE-2026-24715 | MEDIUM | 5.3 | 0.2% | Oct 15, 2026 | An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability cou... |
| CVE-2026-22896 | MEDIUM | 6.2 | 0.4% | Oct 15, 2026 | A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch. If a remote attacker ga... |
| CVE-2026-19377 | MEDIUM | 6 | 0.1% | Oct 15, 2026 | Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonat... |
| CVE-2026-11905 | MEDIUM | 4.3 | 0.3% | Oct 15, 2026 | The Elementor Website Builder – more than just a page builder plugin for WordPress is vulnerable to Sensitive Informatio... |
| CVE-2026-110934 | MEDIUM | 4.4 | 0.1% | Oct 15, 2026 | Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issu... |