CVE Vulnerability Database
Search and browse 389,173 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-16544 | MEDIUM | 6.5 | — | Jul 22, 2026 | A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are ... |
| CVE-2025-13146 | MEDIUM | 6.5 | — | Jul 22, 2026 | The The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to arbitrary shortcode execution in a... |
| CVE-2026-16473 | MEDIUM | 4.3 | 0.2% | Jul 22, 2026 | A flaw was found in the sbc library (BlueZ SBC codec). An off-by-one error in the SBC frame decoder allows a crafted aud... |
| CVE-2026-14551 | HIGH | 8.8 | — | Jul 22, 2026 | The servereye client (also known as sensorhub, technically ClientAgentContainerService) versions 20.15 and earlier are v... |
| CVE-2026-63264 | MEDIUM | 5.3 | 0.3% | Jul 22, 2026 | Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping < 5.9.3 - The Joomla extension JoomShopping is vuln... |
| CVE-2026-2406 | MEDIUM | 6.5 | 0.3% | Jul 22, 2026 | Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industr... |
| CVE-2026-15787 | MEDIUM | 6.4 | 0.2% | Jul 22, 2026 | The Ultimate Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Navigation Menu ... |
| CVE-2026-63048 | CRITICAL | 9.4 | 0.4% | Jul 22, 2026 | Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The... |
| CVE-2026-63047 | HIGH | 7.5 | 0.2% | Jul 22, 2026 | Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - ... |
| CVE-2026-45820 | HIGH | 7.5 | 0.3% | Jul 22, 2026 | fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with ... |
| CVE-2026-3821 | HIGH | 8.8 | 0.6% | Jul 22, 2026 | Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attack... |
| CVE-2026-14322 | MEDIUM | 5.3 | 0.1% | Jul 22, 2026 | The Timetics WordPress plugin before 1.0.57 does not enforce a pending or unpaid status for new bookings created throug... |
| CVE-2026-12987 | HIGH | 7.5 | 0.2% | Jul 22, 2026 | The Events Manager WordPress plugin before 7.3.7 does not safely handle booking-registration data on sites using No-Use... |
| CVE-2026-12968 | HIGH | 8.8 | 0.2% | Jul 22, 2026 | The Product Addons and Product Options With Custom Fields WordPress plugin before 1.6.15 does not restrict an unauthent... |
| CVE-2026-15802 | HIGH | 8.1 | 0.5% | Jul 22, 2026 | The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation... |
| CVE-2026-56844 | HIGH | 8.4 | 0.1% | Jul 22, 2026 | A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate ... |
| CVE-2026-16492 | MEDIUM | 5.5 | 1.7% | Jul 22, 2026 | A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of ... |
| CVE-2026-16490 | MEDIUM | 6.3 | 0.2% | Jul 22, 2026 | A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of t... |
| CVE-2026-63263 | MEDIUM | 6.5 | 0.2% | Jul 22, 2026 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansio... |
| CVE-2026-63262 | MEDIUM | 4.3 | 0.2% | Jul 22, 2026 | Missing Authorization (CWE-862) in Kibana can lead to unauthorized cross-space information disclosure via user-supplied ... |
| CVE-2026-16489 | MEDIUM | 5.3 | 0.6% | Jul 22, 2026 | A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function _execCommand in the library lib... |
| CVE-2026-16488 | MEDIUM | 5 | 1.0% | Jul 22, 2026 | A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the function subprocess.Po... |
| CVE-2026-63261 | MEDIUM | 6.5 | 0.3% | Jul 21, 2026 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)... |
| CVE-2026-63260 | MEDIUM | 6.5 | 0.3% | Jul 21, 2026 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)... |
| CVE-2026-63259 | MEDIUM | 4.3 | 0.2% | Jul 21, 2026 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via user-supplie... |