CVE Vulnerability Database
Search and browse 425,004 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-92393 | LOW | 2 | 0.5% | Oct 7, 2026 | Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassi... |
| CVE-2026-78243 | LOW | 2.1 | 0.3% | Oct 7, 2026 | Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read proces... |
| CVE-2026-42721 | HIGH | 7.6 | — | Oct 7, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SERVIT Software So... |
| CVE-2026-42720 | HIGH | 7.6 | — | Oct 7, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sarah Giles Dynami... |
| CVE-2026-27434 | MEDIUM | 5.3 | — | Oct 7, 2026 | Missing Authorization vulnerability in sc Internet Vivoo WP Rentals wprentals allows Exploiting Incorrectly Configured A... |
| CVE-2026-105884 | MEDIUM | 6.5 | — | Oct 7, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Media Rocket La... |
| CVE-2026-105876 | MEDIUM | 5.3 | — | Oct 7, 2026 | Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Retrieve Embedded S... |
| CVE-2026-105875 | MEDIUM | 6.5 | — | Oct 7, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Sli... |
| CVE-2026-105873 | MEDIUM | 6.5 | — | Oct 7, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element P... |
| CVE-2026-105871 | MEDIUM | 6.5 | — | Oct 7, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element P... |
| CVE-2026-105192 | CRITICAL | 9.8 | 0.8% | Oct 7, 2026 | LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can ... |
| CVE-2026-104393 | MEDIUM | 6.5 | — | Oct 7, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy Addon... |
| CVE-2026-104391 | MEDIUM | 6.5 | — | Oct 7, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz A... |
| CVE-2026-104390 | MEDIUM | 4.3 | — | Oct 7, 2026 | Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Contr... |
| CVE-2026-103075 | MEDIUM | 4.3 | — | Oct 7, 2026 | Missing Authorization vulnerability in WPMU DEV Hustle wordpress-popup allows Exploiting Incorrectly Configured Access C... |
| CVE-2026-97720 | CRITICAL | 9.1 | 0.2% | Oct 7, 2026 | Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4... |
| CVE-2026-93684 | MEDIUM | 5.4 | 0.2% | Oct 7, 2026 | An SQL user using Impala up to and including version 4.5.2 with only SELECT permission can put JavaScript in a table ali... |
| CVE-2026-93026 | MEDIUM | 6.1 | — | Oct 7, 2026 | This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and ... |
| CVE-2026-90466 | MEDIUM | 6.5 | 0.3% | Oct 7, 2026 | Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path... |
| CVE-2026-89417 | HIGH | 7.2 | 0.2% | Oct 7, 2026 | The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin for WordPress is vulnerable to Stored Cross-Site Scri... |
| CVE-2026-5703 | HIGH | 7.1 | 0.3% | Oct 7, 2026 | Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by... |
| CVE-2026-58069 | HIGH | 8.3 | — | Oct 7, 2026 | This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on... |
| CVE-2026-58068 | MEDIUM | 6.8 | — | Oct 7, 2026 | This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the sy... |
| CVE-2026-19186 | HIGH | 8.1 | 0.2% | Oct 7, 2026 | ieee802154_decipher_data_frame() in subsys/net/l2/ieee802154/ieee802154_frame.c computed payload_len = net_pkt_get_len(p... |
| CVE-2026-15894 | HIGH | 8.8 | 0.3% | Oct 7, 2026 | The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a receive... |