CVE Vulnerability Database
Search and browse 425,002 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-106596 | MEDIUM | 5.3 | — | Oct 8, 2026 | Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Exploiting ... |
| CVE-2026-105893 | MEDIUM | 5.3 | — | Oct 8, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets all... |
| CVE-2026-105891 | MEDIUM | 4.3 | 0.2% | Oct 8, 2026 | Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly ... |
| CVE-2026-105890 | MEDIUM | 6.5 | — | Oct 8, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell... |
| CVE-2026-105888 | MEDIUM | 5.4 | — | Oct 8, 2026 | Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly ... |
| CVE-2026-105887 | MEDIUM | 6.5 | — | Oct 8, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robosoft Robo Gall... |
| CVE-2026-105886 | MEDIUM | 6.5 | — | Oct 8, 2026 | Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Config... |
| CVE-2026-105878 | MEDIUM | 5.3 | — | Oct 8, 2026 | Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exp... |
| CVE-2026-105079 | MEDIUM | 6.5 | 0.2% | Oct 8, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StylemixThemes Mas... |
| CVE-2026-105078 | MEDIUM | 6.5 | — | Oct 8, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Store Locator W... |
| CVE-2026-105076 | HIGH | 7.6 | — | Oct 8, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Appsbd Vitepos vit... |
| CVE-2026-103072 | MEDIUM | 4.3 | — | Oct 8, 2026 | Missing Authorization vulnerability in VillaTheme VillaTheme Core villatheme-core allows Exploiting Incorrectly Configur... |
| CVE-2026-103070 | MEDIUM | 6.5 | — | Oct 8, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShortPixel ShortPi... |
| CVE-2026-102784 | HIGH | 8.7 | — | Oct 8, 2026 | Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesController uses a trait... |
| CVE-2026-102783 | MEDIUM | 6.3 | — | Oct 8, 2026 | Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 - Gridbox contains the same prefix-o... |
| CVE-2026-92555 | CRITICAL | 9.8 | — | Oct 8, 2026 | Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Export Industry and Tra... |
| CVE-2026-19083 | HIGH | 8.8 | — | Oct 8, 2026 | Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trad... |
| CVE-2026-107587 | MEDIUM | 5.9 | — | Oct 8, 2026 | Improper certificate validation in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote unau... |
| CVE-2026-107584 | HIGH | 7.4 | — | Oct 8, 2026 | Progressive Robot hMailServer 6.0.0 through 6.3.5 fails open when applying DANE (RFC 7672) to outbound SMTP delivery. Th... |
| CVE-2026-107583 | MEDIUM | 6.5 | — | Oct 8, 2026 | Inefficient algorithmic complexity in the webmail's message view of the REST API in Progressive Robot hMailServer 6.3.2 ... |
| CVE-2026-107582 | MEDIUM | 6.5 | — | Oct 8, 2026 | Inefficient algorithmic complexity in the REST API (6.3.3 through 6.3.5) and the IMAP PREVIEW response (6.2.22 through 6... |
| CVE-2026-107581 | MEDIUM | 6.5 | — | Oct 8, 2026 | Progressive Robot hMailServer 6.0.0 through 6.3.5 processes several IMAP commands from a signed-in account in time quadr... |
| CVE-2026-107580 | MEDIUM | 6.5 | — | Oct 8, 2026 | Inefficient algorithmic complexity in the decoding of message header fields in Progressive Robot hMailServer 6.0.0 throu... |
| CVE-2026-107579 | HIGH | 7.5 | — | Oct 8, 2026 | Inefficient algorithmic complexity in the bounce and complaint processing of Progressive Robot hMailServer 6.3.4 and 6.3... |
| CVE-2026-107578 | MEDIUM | 6.7 | — | Oct 8, 2026 | Improper link resolution and external control of file paths in the administrative command-line operations of hMailServer... |