CVE Vulnerability Database
Search and browse 423,961 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-73797 | MEDIUM | 5.3 | — | Oct 14, 2026 | A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called. |
| CVE-2026-97315 | MEDIUM | 5.4 | — | Oct 14, 2026 | The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Fo... |
| CVE-2026-88998 | MEDIUM | 5.3 | — | Oct 14, 2026 | The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications, a... |
| CVE-2026-88842 | LOW | 3.3 | 0.2% | Oct 14, 2026 | A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas... |
| CVE-2026-82844 | MEDIUM | 5.3 | — | Oct 14, 2026 | The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepti... |
| CVE-2026-73796 | MEDIUM | 4.4 | — | Oct 14, 2026 | A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query. |
| CVE-2026-73795 | MEDIUM | 6.4 | — | Oct 14, 2026 | A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service. |
| CVE-2026-108072 | MEDIUM | 5.4 | 0.1% | Oct 14, 2026 | Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, loca... |
| CVE-2026-108071 | HIGH | 8.7 | 0.5% | Oct 14, 2026 | Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism. A remote... |
| CVE-2026-108070 | HIGH | 8.7 | 0.4% | Oct 14, 2026 | A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated ... |
| CVE-2026-107913 | — | — | — | Oct 14, 2026 | Rejected reason: This CVE ID is a duplicate of CVE-2026-39749 and was never published. Both IDs were assigned to the sam... |
| CVE-2026-107431 | HIGH | 7.5 | — | Oct 14, 2026 | Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured... |
| CVE-2026-105067 | HIGH | 8.5 | 0.3% | Oct 14, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webnus Modern Even... |
| CVE-2026-104795 | HIGH | 8.8 | 0.2% | Oct 14, 2026 | The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runti... |
| CVE-2026-103905 | HIGH | 7.5 | 0.5% | Oct 14, 2026 | The authentication middleware of the JTL-Shop administration backend processes the plugin safe mode toggle on the admin ... |
| CVE-2026-103904 | CRITICAL | 9.3 | 0.4% | Oct 14, 2026 | The public consent endpoint of JTL-Shop accepts arbitrary consent names from unauthenticated visitors without validating... |
| CVE-2026-103358 | HIGH | 7.5 | 0.3% | Oct 14, 2026 | Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template Customizer for WooC... |
| CVE-2026-103308 | MEDIUM | 6.5 | — | Oct 14, 2026 | The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not verify the authenticity of payment gateway return r... |
| CVE-2026-101341 | HIGH | 8.7 | 0.3% | Oct 14, 2026 | Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved fo... |
| CVE-2026-101339 | HIGH | 8.7 | 0.3% | Oct 14, 2026 | A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous serv... |
| CVE-2026-101338 | HIGH | 8.7 | 0.3% | Oct 14, 2026 | When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, ... |
| CVE-2026-101337 | HIGH | 8.7 | 0.3% | Oct 14, 2026 | When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. T... |
| CVE-2026-101301 | MEDIUM | 5.3 | — | Oct 14, 2026 | The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen befo... |
| CVE-2026-100229 | — | — | 0.3% | Oct 14, 2026 | Rejected reason: No standard GStreamer pipeline element invokes the vulnerable parser API. Exploitation would require a ... |
| CVE-2026-90954 | HIGH | 7.8 | 0.2% | Oct 14, 2026 | A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks after each a... |