CVE Vulnerability Database
Search and browse 423,902 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110933 | MEDIUM | 4.4 | 0.1% | Oct 15, 2026 | Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond:... |
| CVE-2026-109145 | CRITICAL | 9.8 | 0.1% | Oct 15, 2026 | The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its AJAX account-regist... |
| CVE-2026-106031 | MEDIUM | 6.5 | 0.1% | Oct 15, 2026 | The Spin Wheel WordPress plugin before 2.2.1 does not verify that a visitor actually performed a legitimate spin before... |
| CVE-2026-104643 | MEDIUM | 4.2 | 0.1% | Oct 15, 2026 | The Easy HTTPS Redirection (SSL) WordPress plugin before 2.0.2 does not perform capability checks in some of its AJAX ac... |
| CVE-2026-103324 | MEDIUM | 5.3 | 0.1% | Oct 15, 2026 | The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly verify the authenticity of... |
| CVE-2026-103304 | MEDIUM | 5.3 | 0.1% | Oct 15, 2026 | The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its canc... |
| CVE-2026-101308 | MEDIUM | 5.5 | 0.1% | Oct 15, 2026 | When an audio channel's buffer needs to be resized, the sound(4) driver checks that the buffer is not memory-mapped and ... |
| CVE-2026-101307 | CRITICAL | 9.1 | 0.3% | Oct 15, 2026 | When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeated doublings caused ... |
| CVE-2026-101306 | CRITICAL | 9.8 | 0.3% | Oct 15, 2026 | SCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred. A process cou... |
| CVE-2026-101305 | HIGH | 8.8 | 0.4% | Oct 15, 2026 | renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments. A jailed process could rename a directory re... |
| CVE-2026-101304 | HIGH | 7.1 | 0.1% | Oct 15, 2026 | When fdescfs(4) was mounted in a jail with the "nodup" option, opening /dev/fd/N returned a descriptor that did not inhe... |
| CVE-2026-101303 | HIGH | 7.5 | 0.4% | Oct 15, 2026 | The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address... |
| CVE-2026-101302 | MEDIUM | 6.5 | 0.4% | Oct 15, 2026 | TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero pa... |
| CVE-2025-68404 | HIGH | 7.5 | 0.2% | Oct 15, 2026 | A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter. If exploited, th... |
| CVE-2025-68403 | MEDIUM | 4.6 | 0.1% | Oct 15, 2026 | An external control of system or configuration setting vulnerability has been reported to affect QuRouter. If a local at... |
| CVE-2025-66275 | MEDIUM | 6.5 | 0.4% | Oct 15, 2026 | A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, the... |
| CVE-2025-66272 | MEDIUM | 6.5 | 0.4% | Oct 15, 2026 | A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, the... |
| CVE-2025-29897 | LOW | 2.3 | 0.3% | Oct 15, 2026 | A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attack... |
| CVE-2025-29896 | LOW | 2.3 | 0.3% | Oct 15, 2026 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac... |
| CVE-2025-29895 | LOW | 2.3 | 0.3% | Oct 15, 2026 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac... |
| CVE-2026-88043 | HIGH | 7.2 | 0.2% | Oct 15, 2026 | The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all... |
| CVE-2026-86803 | MEDIUM | 6.5 | 0.2% | Oct 15, 2026 | The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and inclu... |
| CVE-2026-78087 | MEDIUM | 6.4 | 0.2% | Oct 15, 2026 | The VK Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Block 'linkToPost' Feature in ... |
| CVE-2026-78001 | MEDIUM | 6.4 | 0.2% | Oct 15, 2026 | The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Stored Cross-S... |
| CVE-2026-18586 | HIGH | 7.2 | 0.2% | Oct 15, 2026 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Unauthenticated Stored Cross... |