CVE Vulnerability Database
Search and browse 424,940 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-107794 | HIGH | 7.5 | 0.2% | Oct 10, 2026 | ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typema... |
| CVE-2026-107373 | CRITICAL | 9.1 | 0.2% | Oct 10, 2026 | ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringi... |
| CVE-2013-10076 | HIGH | 7.5 | 0.2% | Oct 10, 2026 | ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OUTPUT type... |
| CVE-2026-103636 | HIGH | 7.5 | 0.2% | Oct 10, 2026 | Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp). var_opt_uni... |
| CVE-2026-103635 | CRITICAL | 9.1 | 0.2% | Oct 10, 2026 | Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). com... |
| CVE-2026-103513 | CRITICAL | 9.8 | 0.2% | Oct 10, 2026 | Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). A c... |
| CVE-2026-103501 | CRITICAL | 9.8 | 0.2% | Oct 10, 2026 | Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). When deseri... |
| CVE-2026-108506 | MEDIUM | 5.5 | 0.1% | Oct 10, 2026 | ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-pa... |
| CVE-2026-106139 | MEDIUM | 5.4 | 0.2% | Oct 10, 2026 | In Progress® Kendo UI for Vue (@progress/kendo-vue-charts) starting with version 2.5.0 and prior to 16.2.0, the default ... |
| CVE-2026-106138 | MEDIUM | 5.4 | 0.2% | Oct 10, 2026 | In Progress® KendoReact (@progress/kendo-react-charts) starting with version 1.1.0 and prior to 16.2.0, the default Char... |
| CVE-2026-91136 | HIGH | 7.5 | 0.6% | Oct 10, 2026 | The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the ... |
| CVE-2026-4791 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `logou... |
| CVE-2026-108505 | LOW | 3.3 | 0.1% | Oct 10, 2026 | ZTE Z80 Ultra has a local information disclosure vulnerability. Third-party applications can capture data returned by sy... |
| CVE-2026-107657 | HIGH | 7.2 | 0.2% | Oct 10, 2026 | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-... |
| CVE-2026-104722 | MEDIUM | 4.9 | 0.6% | Oct 10, 2026 | The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary... |
| CVE-2026-97396 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The Email Marketing for WordPress and WooCommerce – Retainful plugin for WordPress is vulnerable to Stored Cross-Site Sc... |
| CVE-2026-97340 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Stored Cross-Site Scripting... |
| CVE-2026-96765 | HIGH | 7.2 | 0.3% | Oct 10, 2026 | The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cr... |
| CVE-2026-96662 | HIGH | 7.5 | 0.4% | Oct 10, 2026 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to g... |
| CVE-2026-96653 | MEDIUM | 6.5 | 0.2% | Oct 10, 2026 | The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'display_name' Profile Field (Se... |
| CVE-2026-96563 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripti... |
| CVE-2026-96278 | HIGH | 7.2 | 0.3% | Oct 10, 2026 | The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Session Histor... |
| CVE-2026-93951 | HIGH | 7.1 | 0.1% | Oct 10, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Zeinet ... |
| CVE-2026-93950 | HIGH | 7.5 | 0.2% | Oct 10, 2026 | Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Cont... |
| CVE-2026-93949 | HIGH | 7.1 | 0.2% | Oct 10, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Omegathemes Grocery Shopping Store grocery-sho... |