CVE Vulnerability Database
Search and browse 425,004 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-107104 | CRITICAL | 9.3 | 0.4% | Oct 7, 2026 | This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functi... |
| CVE-2026-107103 | CRITICAL | 9.3 | 0.3% | Oct 7, 2026 | This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input i... |
| CVE-2026-107102 | CRITICAL | 9.3 | 0.3% | Oct 7, 2026 | This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate aut... |
| CVE-2026-103416 | CRITICAL | 9.3 | 0.2% | Oct 7, 2026 | Out-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows ... |
| CVE-2026-102782 | CRITICAL | 9.3 | 0.3% | Oct 7, 2026 | Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0 - site/simplemembe... |
| CVE-2026-102781 | MEDIUM | 6.9 | 0.2% | Oct 7, 2026 | Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6 - modOsTouchSliderHe... |
| CVE-2025-64393 | CRITICAL | 9.4 | 0.4% | Oct 7, 2026 | This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backu... |
| CVE-2025-64392 | MEDIUM | 4.8 | 0.3% | Oct 7, 2026 | This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal us... |
| CVE-2025-64391 | MEDIUM | 4.1 | 0.1% | Oct 7, 2026 | This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files... |
| CVE-2026-107121 | MEDIUM | 6.5 | 0.1% | Oct 7, 2026 | A flaw was found in the SMTP email configuration handling of the keycloak-services component. When the STARTTLS option i... |
| CVE-2026-97354 | MEDIUM | 4.1 | 0.2% | Oct 7, 2026 | The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redire... |
| CVE-2026-97331 | MEDIUM | 4.3 | 0.2% | Oct 7, 2026 | The User Private Files WordPress plugin before 2.1.9 does not validate that a supplied user belongs to the document bei... |
| CVE-2026-97188 | HIGH | 8.8 | 0.4% | Oct 7, 2026 | The String locator WordPress plugin before 2.6.8 does not restrict the classes allowed when deserializing the content of... |
| CVE-2026-96530 | MEDIUM | 6.5 | 0.2% | Oct 7, 2026 | The Optimole WordPress plugin before 4.2.15 does not perform a capability check before exposing its stored image-optimi... |
| CVE-2026-87971 | HIGH | 7.1 | 0.1% | Oct 7, 2026 | The If-So Dynamic Content WordPress plugin before 1.10.2 does not validate the URL scheme of a request-supplied value b... |
| CVE-2026-87782 | HIGH | 8.8 | 0.2% | Oct 7, 2026 | The Koinonia Link WordPress plugin before 1.1.5 does not check that a user is allowed to change roles before saving a ro... |
| CVE-2026-86833 | MEDIUM | 5.4 | 0.2% | Oct 7, 2026 | The MetForm WordPress plugin before 4.3.1 does not sanitize or escape submitted form-field values before inserting them ... |
| CVE-2026-86816 | MEDIUM | 5.3 | 0.2% | Oct 7, 2026 | The WPCafe WordPress plugin before 3.0.21 does not restrict access to some of its REST API endpoints, allowing unauthen... |
| CVE-2026-82212 | HIGH | 7.5 | 0.1% | Oct 7, 2026 | The Nexi XPay Build WordPress plugin through 7.6.2 does not correctly validate the security token on its payment notific... |
| CVE-2026-82211 | HIGH | 8.2 | 0.2% | Oct 7, 2026 | The Nexi XPay Build WordPress plugin through 7.6.2 does not verify the payment result supplied to several of its unauthe... |
| CVE-2026-105322 | MEDIUM | 5.3 | 0.2% | Oct 7, 2026 | The Magee Shortcodes WordPress plugin through 2.1.1 does not restrict the recipient of some of its unauthenticated conta... |
| CVE-2026-105316 | HIGH | 7.1 | 0.2% | Oct 7, 2026 | The Magee Shortcodes WordPress plugin through 2.1.1 does not sanitise and escape user input in some of its AJAX actions,... |
| CVE-2026-104953 | MEDIUM | 6.8 | 0.2% | Oct 7, 2026 | The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it... |
| CVE-2026-104678 | LOW | 2.7 | 0.2% | Oct 7, 2026 | The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, all... |
| CVE-2026-104677 | HIGH | 7.2 | 0.4% | Oct 7, 2026 | The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators... |