CVE Vulnerability Database
Search and browse 424,998 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-94664 | HIGH | 7.5 | — | Oct 9, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org PDF for Cont... |
| CVE-2026-94663 | HIGH | 8.5 | — | Oct 9, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileG... |
| CVE-2026-94661 | HIGH | 7.1 | 0.2% | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog... |
| CVE-2026-94641 | HIGH | 7.1 | 0.2% | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP us... |
| CVE-2026-94632 | HIGH | 7.1 | — | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan BlockStrap... |
| CVE-2026-94568 | HIGH | 7.2 | — | Oct 9, 2026 | Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object ... |
| CVE-2026-94503 | CRITICAL | 10 | — | Oct 9, 2026 | Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web Shell to a W... |
| CVE-2026-94415 | HIGH | 7.1 | 0.2% | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Muffingroup Bethem... |
| CVE-2026-94170 | HIGH | 7.1 | 0.2% | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Sa... |
| CVE-2026-94167 | HIGH | 7.1 | — | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubi... |
| CVE-2026-94166 | HIGH | 7.1 | 0.2% | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolut... |
| CVE-2026-94161 | HIGH | 7.1 | — | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand R... |
| CVE-2026-94159 | HIGH | 7.1 | 0.2% | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KlbTheme Total Don... |
| CVE-2026-94158 | HIGH | 7.1 | 0.2% | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bkninja Gloria Adm... |
| CVE-2026-93947 | CRITICAL | 9.3 | — | Oct 9, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shinetheme Travele... |
| CVE-2026-78341 | HIGH | 7.2 | 0.3% | Oct 9, 2026 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vuln... |
| CVE-2026-78340 | MEDIUM | 6.7 | 0.1% | Oct 9, 2026 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pat... |
| CVE-2026-78339 | HIGH | 7.1 | 0.1% | Oct 9, 2026 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignm... |
| CVE-2026-78027 | MEDIUM | 6.8 | 0.2% | Oct 9, 2026 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (... |
| CVE-2026-78026 | HIGH | 8.8 | 0.2% | Oct 9, 2026 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through... |
| CVE-2026-78025 | HIGH | 7.5 | 0.4% | Oct 9, 2026 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Cr... |
| CVE-2026-78024 | HIGH | 8.7 | 0.2% | Oct 9, 2026 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (... |
| CVE-2026-78023 | HIGH | 8.8 | 0.2% | Oct 9, 2026 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through... |
| CVE-2026-71884 | HIGH | 8.2 | 0.4% | Oct 9, 2026 | In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR packet cipher did not check that the requested inp... |
| CVE-2026-62049 | MEDIUM | 6.5 | — | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBloc... |