CVE Vulnerability Database
Search and browse 423,961 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-106099 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized user... |
| CVE-2026-106098 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | The WP Data Access WordPress plugin before 5.5.77 does not correctly check authorization on one of its application REST... |
| CVE-2026-105975 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | The CamPay Shortcode Payment Gateway WordPress plugin before 1.7 does not verify the authenticity of Mobile Money paymen... |
| CVE-2026-105969 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict access to guest-submitte... |
| CVE-2026-105261 | MEDIUM | 6.8 | 0.2% | Oct 14, 2026 | The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress... |
| CVE-2026-104751 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | The Rank Math SEO WordPress plugin before 1.0.280 does not perform a capability or nonce check before clearing its stor... |
| CVE-2026-104644 | MEDIUM | 6.8 | 0.2% | Oct 14, 2026 | The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.15 does not sanitize or escape gallery configuratio... |
| CVE-2026-103307 | HIGH | 8.6 | 0.2% | Oct 14, 2026 | The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user i... |
| CVE-2026-94370 | MEDIUM | 6.5 | 0.3% | Oct 14, 2026 | A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt ... |
| CVE-2026-50218 | HIGH | 8.5 | 0.3% | Oct 14, 2026 | Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seedi... |
| CVE-2026-50217 | MEDIUM | 4.7 | 0.1% | Oct 14, 2026 | A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a loca... |
| CVE-2026-50216 | MEDIUM | 5.3 | 0.3% | Oct 14, 2026 | An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akama... |
| CVE-2026-110459 | HIGH | 8.6 | 0.3% | Oct 14, 2026 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Prote... |
| CVE-2026-110458 | LOW | 3.7 | 0.3% | Oct 14, 2026 | A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability f... |
| CVE-2026-110457 | LOW | 3.7 | 0.3% | Oct 14, 2026 | A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability f... |
| CVE-2026-107153 | HIGH | 7 | 0.2% | Oct 14, 2026 | Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) funct... |
| CVE-2026-50215 | MEDIUM | 4.4 | 0.1% | Oct 14, 2026 | A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) bef... |
| CVE-2026-46449 | MEDIUM | 6.7 | 1.7% | Oct 14, 2026 | The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerabilit... |
| CVE-2026-110456 | MEDIUM | 5.3 | 0.3% | Oct 14, 2026 | A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulne... |
| CVE-2026-110455 | HIGH | 8.1 | 1.2% | Oct 14, 2026 | A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vul... |
| CVE-2026-110454 | MEDIUM | 5.3 | 0.3% | Oct 14, 2026 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Prote... |
| CVE-2026-110453 | MEDIUM | 4.3 | 0.1% | Oct 14, 2026 | Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon ... |
| CVE-2026-110452 | MEDIUM | 4 | 0.1% | Oct 14, 2026 | The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installe... |
| CVE-2026-110451 | MEDIUM | 4.3 | 0.1% | Oct 14, 2026 | Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a cer... |
| CVE-2026-110450 | HIGH | 8 | 0.1% | Oct 14, 2026 | Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and t... |