CVE Vulnerability Database
Search and browse 424,653 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-103417 | MEDIUM | 5.5 | 0.1% | Oct 13, 2026 | Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-log... |
| CVE-2026-102562 | HIGH | 7.2 | 0.2% | Oct 13, 2026 | The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField[] parameter of the ... |
| CVE-2026-102007 | HIGH | 7.2 | 0.2% | Oct 13, 2026 | The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vuln... |
| CVE-2026-75826 | HIGH | 8.5 | 0.9% | Oct 13, 2026 | Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUT... |
| CVE-2026-109106 | MEDIUM | 4.4 | 0.2% | Oct 13, 2026 | A security flaw has been discovered in Polaris Office App 9.9.19 on Android. Affected by this vulnerability is the funct... |
| CVE-2026-108975 | HIGH | 7.3 | 0.3% | Oct 13, 2026 | A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the func... |
| CVE-2026-108974 | HIGH | 7.3 | 0.3% | Oct 13, 2026 | A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function save_users of the file... |
| CVE-2026-108973 | HIGH | 7.3 | — | Oct 13, 2026 | A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move... |
| CVE-2026-103316 | HIGH | 7.1 | 0.1% | Oct 13, 2026 | The macOS version of the DigiD app is not signed with Hardened Runtime. As a result, a local process can load its own dy... |
| CVE-2026-89271 | MEDIUM | 5.3 | 0.2% | Oct 13, 2026 | The WP-BusinessDirectory WordPress plugin through 4.0.2 does not restrict the type or destination of files saved by an ... |
| CVE-2026-89269 | MEDIUM | 6.8 | 0.2% | Oct 13, 2026 | The WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and reverses WordPress'... |
| CVE-2026-54870 | MEDIUM | 6.5 | — | Oct 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweaver Weaver Xt... |
| CVE-2026-54869 | MEDIUM | 6.5 | — | Oct 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IDX Broker IMPress... |
| CVE-2026-54868 | MEDIUM | 6.5 | — | Oct 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Sim... |
| CVE-2026-54867 | MEDIUM | 6.5 | — | Oct 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Griden Responsive ... |
| CVE-2026-108972 | HIGH | 7.3 | 0.7% | Oct 13, 2026 | A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the ... |
| CVE-2026-108971 | CRITICAL | 9.6 | 0.2% | Oct 13, 2026 | A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bi... |
| CVE-2026-108970 | HIGH | 7.3 | 0.4% | Oct 13, 2026 | A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449.... |
| CVE-2026-108969 | HIGH | 7.3 | — | Oct 13, 2026 | A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c991... |
| CVE-2026-108968 | HIGH | 7.3 | 0.4% | Oct 13, 2026 | A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown fu... |
| CVE-2026-108967 | HIGH | 7.3 | 0.4% | Oct 13, 2026 | A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function ... |
| CVE-2026-108966 | HIGH | 7.3 | 0.4% | Oct 13, 2026 | A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown proce... |
| CVE-2026-109758 | CRITICAL | 9.3 | 0.4% | Oct 13, 2026 | Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable... |
| CVE-2026-108965 | HIGH | 7.3 | — | Oct 13, 2026 | A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown co... |
| CVE-2026-108964 | HIGH | 7.3 | 0.4% | Oct 13, 2026 | A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /... |