CVE Vulnerability Database

Search and browse 424,847 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-108584MEDIUM5.3A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the ...
CVE-2026-108578MEDIUM5.3A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of th...
CVE-2026-108577MEDIUM4.3A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add...
CVE-2026-108576CRITICAL10A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping of the compon...
CVE-2026-108575MEDIUM6.3A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_...
CVE-2026-108574MEDIUM4.3A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function ui_view_session_spend_logs...
CVE-2026-108573MEDIUM5.5A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the func...
CVE-2026-108572MEDIUM4.3A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate ...
CVE-2026-108571HIGH7.3A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. This impacts the function kqjcmdModel::returnchuli ...
CVE-2026-108570MEDIUM6.3A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the...
CVE-2026-108569MEDIUM6.3A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Repl...
CVE-2026-108568MEDIUM4.3A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is the function validatePaypalOrd...
CVE-2026-108567MEDIUM4.3A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function files_delete_file of the file syst...
CVE-2026-108566LOW3.5A vulnerability has been found in InstantSoft icms2 up to 2.18.2. This issue affects the function index of the file temp...
CVE-2026-108544MEDIUM6.3A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function ...
CVE-2026-108543MEDIUM6.3A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the com...
CVE-2026-108542MEDIUM6.3A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of...
CVE-2026-97183MEDIUM4.3The WP-Invoice WordPress plugin through 4.3.1 does not perform capability checks in several of its AJAX handlers, allow...
CVE-2026-96227HIGH8.8The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form-submission file-upload reques...
CVE-2026-94235MEDIUM4.3The MemberHero WordPress plugin through 6.9 does not perform any capability or nonce check on one of its AJAX actions, ...
CVE-2026-93550MEDIUM4.3The Veeqo for WooCommerce WordPress plugin through 2.2.8 does not restrict who can trigger its remote bridge-installatio...
CVE-2026-91829HIGH7.1The Subscribe to Comments WordPress plugin before 2.3.3 does not properly validate a parameter before reflecting it into...
CVE-2026-89305MEDIUM6.5The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL qu...
CVE-2026-89304MEDIUM6.5The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL qu...
CVE-2026-89302HIGH8.6The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in...