CVE Vulnerability Database
Search and browse 420,055 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108068 | LOW | 3.8 | 0.1% | Nov 4, 2026 | The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not perform proper authorization checks on one o... |
| CVE-2026-108067 | LOW | 3.8 | 0.1% | Nov 4, 2026 | The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not properly verify record ownership before modi... |
| CVE-2026-108041 | HIGH | 7.1 | 0.2% | Nov 4, 2026 | The SEOPress WordPress plugin before 10.4 does not sanitise and escape some of its analytics tracking settings before o... |
| CVE-2026-106649 | MEDIUM | 6.8 | 0.2% | Nov 4, 2026 | The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.29 does not prevent users with author-... |
| CVE-2026-106000 | MEDIUM | 5.3 | 0.2% | Nov 4, 2026 | The Booking Package WordPress plugin before 1.7.34 does not require payment to be completed before saving a booking on c... |
| CVE-2026-105413 | HIGH | 7.5 | 0.2% | Nov 4, 2026 | The Form Maker by 10Web WordPress plugin before 1.15.51 does not consistently escape user-submitted field values before... |
| CVE-2026-105191 | MEDIUM | 4.3 | 0.2% | Nov 4, 2026 | The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce WordPress plugin before 1.17.11 does not perform a ca... |
| CVE-2026-104719 | MEDIUM | 6.4 | 0.2% | Nov 4, 2026 | The CookieYes WordPress plugin before 3.5.8 does not correctly restrict who can write its cookie-category script fields... |
| CVE-2026-101166 | LOW | 3.7 | 0.2% | Nov 4, 2026 | The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify a product's publication status before ... |
| CVE-2026-101165 | LOW | 3.7 | 0.1% | Nov 4, 2026 | The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify an order's payment state or the reques... |
| CVE-2025-11229 | HIGH | 7.2 | — | Nov 4, 2026 | The system fails to properly enforce scope authorization when the `authorize_all_scopes` configuration is enabled. This ... |
| CVE-2026-105296 | MEDIUM | 5.1 | 0.1% | Nov 4, 2026 | Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into... |
| CVE-2026-80335 | HIGH | 7.6 | 0.3% | Nov 4, 2026 | Memory Corruption when processing firmware update data in Download mode due to a missing bounds check. |
| CVE-2026-79405 | HIGH | 7.5 | 0.7% | Nov 4, 2026 | Transient DOS when processing a malformed NR RRC configuration message due to improper input validation. |
| CVE-2026-121803 | — | — | — | Nov 4, 2026 | Rejected reason: This CVE ID is a duplicate of CVE-2026-80335 (VULN-002 dl_download_midst) and has been rejected. |
| CVE-2026-121802 | CRITICAL | 9.1 | 0.2% | Nov 4, 2026 | @better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenticated changes of any account's... |
| CVE-2026-121618 | MEDIUM | 5.3 | — | Nov 4, 2026 | A weakness has been identified in Linksys E5600 1.1.0.26. This affects an unknown part of the file /cgi-bin/fqc.cgi of t... |
| CVE-2026-121617 | HIGH | 7.5 | — | Nov 4, 2026 | A security flaw has been discovered in Linksys E5600 1.1.0.26. Affected by this issue is the function init_multipart of ... |
| CVE-2026-121616 | MEDIUM | 5.3 | — | Nov 4, 2026 | A vulnerability was identified in Linksys E5600 1.1.0.26. Affected by this vulnerability is the function strcpy of the f... |
| CVE-2026-121615 | CRITICAL | 10 | — | Nov 4, 2026 | A vulnerability was determined in Linksys E5600 1.1.0.26. Affected is an unknown function of the file /cgi-bin/mesh_logi... |
| CVE-2026-84730 | HIGH | 8.7 | 0.3% | Nov 4, 2026 | Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitra... |
| CVE-2026-84729 | HIGH | 7.2 | 0.2% | Nov 4, 2026 | Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the in... |
| CVE-2026-121610 | HIGH | 7.3 | — | Nov 4, 2026 | A security flaw has been discovered in funadmin 7.1.0. Impacted is the function Curd::selectList of the file /frontend/a... |
| CVE-2026-121609 | CRITICAL | 10 | — | Nov 4, 2026 | A vulnerability was identified in Qihoo 360 Whole Home Router M5 4.0.17.1566. This issue affects the function Home of th... |
| CVE-2026-121608 | HIGH | 7.3 | — | Nov 4, 2026 | A vulnerability was determined in Qihoo 360 D603-2, D600-2 and D606-6 up to 6.3.2. This vulnerability affects the functi... |