CVE Vulnerability Database
Search and browse 424,017 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-103425 | MEDIUM | 6.4 | 0.3% | Oct 14, 2026 | The Booking Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all vers... |
| CVE-2026-103423 | HIGH | 7.5 | 0.5% | Oct 14, 2026 | The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7... |
| CVE-2026-110385 | HIGH | 8.7 | 1.0% | Oct 14, 2026 | A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attack... |
| CVE-2026-110359 | HIGH | 7.8 | 0.1% | Oct 14, 2026 | Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privilege... |
| CVE-2026-108473 | HIGH | 8.7 | 0.3% | Oct 14, 2026 | Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unaut... |
| CVE-2026-92817 | HIGH | 8.8 | 0.5% | Oct 14, 2026 | The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An... |
| CVE-2026-88964 | HIGH | 7.1 | 0.5% | Oct 13, 2026 | An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated serv... |
| CVE-2026-53564 | MEDIUM | 5.1 | 0.3% | Oct 13, 2026 | Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR... |
| CVE-2026-53563 | MEDIUM | 6.9 | 0.2% | Oct 13, 2026 | Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR ... |
| CVE-2026-15468 | MEDIUM | 6.9 | 0.1% | Oct 13, 2026 | Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalati... |
| CVE-2026-105390 | MEDIUM | 6.9 | 0.1% | Oct 13, 2026 | Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 al... |
| CVE-2026-105151 | — | — | — | Oct 13, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-105142 | — | — | — | Oct 13, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-104922 | — | — | — | Oct 13, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-97381 | CRITICAL | 9.9 | 0.2% | Oct 13, 2026 | Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1... |
| CVE-2026-95634 | HIGH | 8.6 | 0.5% | Oct 13, 2026 | CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege... |
| CVE-2026-95633 | HIGH | 7.5 | 0.4% | Oct 13, 2026 | CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could resu... |
| CVE-2026-95632 | HIGH | 7.5 | 0.5% | Oct 13, 2026 | CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could resu... |
| CVE-2026-94453 | HIGH | 7.5 | 0.5% | Oct 13, 2026 | Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the conne... |
| CVE-2026-84790 | HIGH | 7.6 | 0.2% | Oct 13, 2026 | OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subje... |
| CVE-2026-84420 | MEDIUM | 5.8 | 0.1% | Oct 13, 2026 | Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app fo... |
| CVE-2026-84419 | MEDIUM | 6.8 | 0.1% | Oct 13, 2026 | Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: be... |
| CVE-2026-77207 | HIGH | 7.5 | 0.3% | Oct 13, 2026 | Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libres... |
| CVE-2026-77206 | HIGH | 7.5 | 0.5% | Oct 13, 2026 | Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a res... |
| CVE-2026-77205 | LOW | 3.7 | 0.2% | Oct 13, 2026 | Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from t... |