CVE Vulnerability Database
Search and browse 423,961 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-88829 | HIGH | 7.2 | 0.3% | Oct 14, 2026 | A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward requests matching a U... |
| CVE-2026-86476 | HIGH | 8.4 | 0.2% | Oct 14, 2026 | A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attach... |
| CVE-2026-73794 | MEDIUM | 4.6 | 0.2% | Oct 14, 2026 | HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG) |
| CVE-2026-73793 | HIGH | 7.9 | 0.4% | Oct 14, 2026 | HPE NonStop Middleware software has secret key handling and data deserialization vulnerability. |
| CVE-2026-73792 | LOW | 3.8 | 0.3% | Oct 14, 2026 | A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow. |
| CVE-2026-73791 | LOW | 2 | 0.2% | Oct 14, 2026 | A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow. |
| CVE-2026-109971 | MEDIUM | 4.7 | 0.2% | Oct 14, 2026 | A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11 token PIN as a command-l... |
| CVE-2026-109970 | MEDIUM | 4.7 | 0.1% | Oct 14, 2026 | A flaw was found in the clevis PKCS#11 pin. The clevis-luks-pkcs11-askpin script writes the PKCS#11 token PIN in plainte... |
| CVE-2026-109969 | MEDIUM | 4.7 | 0.1% | Oct 14, 2026 | A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF_UNIX sockets withou... |
| CVE-2026-100231 | MEDIUM | 6.1 | 0.1% | Oct 14, 2026 | A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing string metadata tags co... |
| CVE-2026-73790 | HIGH | 8.2 | 0.3% | Oct 14, 2026 | A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown. |
| CVE-2026-14851 | CRITICAL | 9.2 | 0.3% | Oct 14, 2026 | A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which ex... |
| CVE-2026-107428 | HIGH | 7.1 | 0.2% | Oct 14, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com P... |
| CVE-2026-103671 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plu... |
| CVE-2026-92392 | HIGH | 8.1 | 0.6% | Oct 14, 2026 | During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFU... |
| CVE-2026-110284 | HIGH | 7.5 | 0.7% | Oct 14, 2026 | The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusi... |
| CVE-2026-110227 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | Missing Authorization vulnerability in 10up Restricted Site Access restricted-site-access allows Exploiting Incorrectly ... |
| CVE-2026-109901 | HIGH | 8.5 | 0.3% | Oct 14, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Mult... |
| CVE-2026-107757 | MEDIUM | 4.9 | 0.2% | Oct 14, 2026 | The Gallery Custom Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name (profil... |
| CVE-2026-107756 | MEDIUM | 6.4 | 0.3% | Oct 14, 2026 | The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name + comment' par... |
| CVE-2026-107754 | MEDIUM | 6.4 | 0.3% | Oct 14, 2026 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to ... |
| CVE-2026-107751 | HIGH | 7.2 | 0.3% | Oct 14, 2026 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name' parameter in all ve... |
| CVE-2026-107650 | MEDIUM | 6.4 | 0.3% | Oct 14, 2026 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to ... |
| CVE-2026-107631 | HIGH | 7.2 | 0.3% | Oct 14, 2026 | The Record of Consent Extension for Complianz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ... |
| CVE-2026-107171 | MEDIUM | 6.9 | 0.1% | Oct 14, 2026 | An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decrypti... |