CVE Vulnerability Database
Search and browse 389,869 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-1617 | CRITICAL | 9.8 | — | Jul 21, 2026 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Turkmesh Communica... |
| CVE-2026-16461 | MEDIUM | 6.5 | 0.2% | Jul 21, 2026 | A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump() short mode (used by `rpcinfo -s`), v... |
| CVE-2026-64606 | CRITICAL | 9.8 | 0.5% | Jul 21, 2026 | Deserialization of untrusted data vulnerability that may allow class-registration checks to be bypassed during Java lamb... |
| CVE-2026-64609 | CRITICAL | 9.1 | 0.3% | Jul 21, 2026 | Out-of-bounds read via sun.misc.Unsafe in Apache Fory. When out-of-band zero-copy deserialization is used, readAlignedVa... |
| CVE-2026-64608 | CRITICAL | 9.8 | 0.4% | Jul 21, 2026 | Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compa... |
| CVE-2026-62415 | CRITICAL | 9.1 | 0.3% | Jul 21, 2026 | Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2 - The Joomla extension Membe... |
| CVE-2026-1771 | HIGH | 7.2 | 0.6% | Jul 21, 2026 | The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SVGFi... |
| CVE-2026-1372 | MEDIUM | 4.3 | 0.2% | Jul 21, 2026 | The Tutor LMS Elementor Addons plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and in... |
| CVE-2026-15370 | HIGH | 7.3 | 0.2% | Jul 21, 2026 | A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concaten... |
| CVE-2026-15145 | MEDIUM | 6.4 | 0.2% | Jul 21, 2026 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored ... |
| CVE-2026-8593 | MEDIUM | 5.3 | 0.2% | Jul 21, 2026 | Improper permission enforcement in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, ... |
| CVE-2026-3183 | HIGH | 7.1 | — | Jul 21, 2026 | Zohocorp ManageEngine ADSelfService Plus versions before 6524 are vulnerable to Multi Factor Authentication Bypass. |
| CVE-2026-8082 | HIGH | 7.5 | 0.2% | Jul 21, 2026 | The bpost-shipping-platform WordPress plugin before 3.2.3 does not properly sanitize a parameter before using it in a SQ... |
| CVE-2026-14185 | MEDIUM | 4.3 | 0.1% | Jul 21, 2026 | The WPBot WordPress plugin before 8.2.0 does not perform a capability or nonce check in one of its retrieval-augmented-... |
| CVE-2026-14184 | MEDIUM | 5.4 | 0.1% | Jul 21, 2026 | The Academy LMS WordPress plugin before 3.8.1 does not verify ownership of a user-supplied user identifier in several of... |
| CVE-2026-14183 | MEDIUM | 4.3 | 0.1% | Jul 21, 2026 | The Classified Listing WordPress plugin before 5.3.9 does not verify that the order targeted by its payment-receipt han... |
| CVE-2026-13694 | MEDIUM | 6.5 | 0.1% | Jul 21, 2026 | The Bit Form WordPress plugin before 3.1.0 does not properly validate its workflow-trigger token once the associated tr... |
| CVE-2026-13693 | MEDIUM | 5.9 | 0.2% | Jul 21, 2026 | The Bit Form WordPress plugin before 3.1.0 does not restrict a form file-field value to a safe path before reading the ... |
| CVE-2026-11767 | HIGH | 8.8 | 0.2% | Jul 21, 2026 | The Free Builder for Elementor WordPress plugin before 1.6.7 does not sanitise submitted contact form field values bef... |
| CVE-2026-3182 | MEDIUM | 4.3 | 0.3% | Jul 21, 2026 | Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive ... |
| CVE-2026-16266 | MEDIUM | 6.3 | 0.2% | Jul 21, 2026 | Versions of the package mongo-object before 3.0.3 are vulnerable to Prototype Pollution via the expandKey() function in ... |
| CVE-2026-15927 | MEDIUM | 6.8 | 0.5% | Jul 21, 2026 | A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints... |
| CVE-2026-15812 | MEDIUM | 4.8 | 0.2% | Jul 21, 2026 | A vulnerability was found in the internal Access Control List (ACL) subsystem of kronosnet (Version affected: <= 1.34). ... |
| CVE-2026-15811 | MEDIUM | 5.8 | 0.1% | Jul 21, 2026 | A vulnerability was found in kronosnet's (version <=1.34) cryptographic configuration management. The framework does not... |
| CVE-2026-15782 | MEDIUM | 4.9 | 0.2% | Jul 21, 2026 | The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPres... |