CVE Vulnerability Database
Search and browse 423,961 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108065 | CRITICAL | 9.8 | 0.8% | Oct 14, 2026 | SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCom... |
| CVE-2026-107870 | HIGH | 7.1 | 0.3% | Oct 14, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngi... |
| CVE-2026-104086 | MEDIUM | 5.5 | 0.2% | Oct 14, 2026 | 7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler (Squashf... |
| CVE-2026-101217 | MEDIUM | 6.5 | 0.6% | Oct 14, 2026 | Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathname to a Restricted Di... |
| CVE-2026-101216 | MEDIUM | 6.6 | — | Oct 14, 2026 | Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in ... |
| CVE-2026-101215 | MEDIUM | 6.6 | — | Oct 14, 2026 | Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in ... |
| CVE-2026-97278 | HIGH | 7.2 | — | Oct 14, 2026 | Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affect... |
| CVE-2026-82026 | HIGH | 8.8 | 0.9% | Oct 14, 2026 | Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint (/api/l... |
| CVE-2026-16741 | CRITICAL | 9.8 | 1.7% | Oct 14, 2026 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber ... |
| CVE-2026-16740 | CRITICAL | 9.8 | 1.7% | Oct 14, 2026 | Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and ... |
| CVE-2026-109968 | MEDIUM | 5.5 | 0.1% | Oct 14, 2026 | A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption pass... |
| CVE-2026-108291 | CRITICAL | 9.8 | 0.5% | Oct 14, 2026 | Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affe... |
| CVE-2026-107867 | HIGH | 7.1 | 0.2% | Oct 14, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProd... |
| CVE-2026-107433 | MEDIUM | 6.5 | — | Oct 14, 2026 | Missing Authorization vulnerability in miniOrange WP OAuth Server miniorange-oauth-20-server allows Exploiting Incorrect... |
| CVE-2026-107426 | HIGH | 7.3 | — | Oct 14, 2026 | Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting I... |
| CVE-2026-107425 | MEDIUM | 6.5 | 0.3% | Oct 14, 2026 | Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-... |
| CVE-2026-107424 | CRITICAL | 9.8 | — | Oct 14, 2026 | Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege ... |
| CVE-2026-107422 | MEDIUM | 6.5 | 0.2% | Oct 14, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in axew3.com WP w3all... |
| CVE-2026-107421 | HIGH | 7.3 | 0.2% | Oct 14, 2026 | Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows S... |
| CVE-2026-107417 | MEDIUM | 6.5 | 0.2% | Oct 14, 2026 | Missing Authorization vulnerability in Muralidharan Ramasamy Push Notification for Post and BuddyPress push-notification... |
| CVE-2026-106599 | HIGH | 8.8 | — | Oct 14, 2026 | Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue... |
| CVE-2026-105874 | HIGH | 7.1 | 0.2% | Oct 14, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S... |
| CVE-2026-85298 | HIGH | 7.3 | 0.4% | Oct 14, 2026 | An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud ... |
| CVE-2026-76655 | HIGH | 7.5 | — | Oct 14, 2026 | A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution |
| CVE-2026-73798 | HIGH | 8.2 | — | Oct 14, 2026 | A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service. |