CVE Vulnerability Database
Search and browse 425,026 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-98172 | — | — | 0.2% | Oct 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbd_connection leak on cifs_get_t... |
| CVE-2026-98171 | HIGH | 8.8 | 0.5% | Oct 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix next_buffer UAF and NextCommand bo... |
| CVE-2026-98170 | — | — | 0.2% | Oct 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB struct field reads in move_smb... |
| CVE-2026-98169 | HIGH | 7.1 | 0.4% | Oct 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOB read in smb3_enum_sn... |
| CVE-2026-98168 | — | — | 0.2% | Oct 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix reparse buffer bounds in cifs_quer... |
| CVE-2026-98167 | — | — | 0.2% | Oct 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server->total_read for compound en... |
| CVE-2026-98166 | HIGH | 7.8 | 0.2% | Oct 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix swapped-out resources never leaving th... |
| CVE-2026-98165 | — | — | 0.2% | Oct 6, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-97308 | MEDIUM | 4.8 | 0.2% | Oct 6, 2026 | Unauthenticated Bypass Vulnerability in Login Lockdown <= 2.17 versions. |
| CVE-2026-95594 | HIGH | 8.1 | 0.2% | Oct 6, 2026 | Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-ale... |
| CVE-2026-95526 | HIGH | 7.3 | 0.2% | Oct 6, 2026 | Unauthenticated Broken Access Control in BEAR <= 1.2.2 versions. |
| CVE-2026-95105 | HIGH | 8.2 | 0.1% | Oct 6, 2026 | Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberk... |
| CVE-2026-94675 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack <= 6.2.13 versions. |
| CVE-2026-94206 | MEDIUM | 6.3 | 0.3% | Oct 6, 2026 | Use of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloak_ecto and danielberkom... |
| CVE-2026-66588 | — | — | 0.3% | Oct 6, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False-positive. |
| CVE-2026-62072 | HIGH | 8.8 | 0.3% | Oct 6, 2026 | Subscriber Broken Access Control in Progress Planner <= 1.10.0 versions. |
| CVE-2026-4889 | HIGH | 7.8 | 0.3% | Oct 6, 2026 | SQL injection (SQLi) vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user ... |
| CVE-2026-48199 | HIGH | 7.5 | 0.4% | Oct 6, 2026 | Unauthenticated Broken Access Control in Sermon'e <= 1.0.2 versions. |
| CVE-2026-48197 | HIGH | 7.2 | 0.5% | Oct 6, 2026 | Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allow... |
| CVE-2026-42638 | HIGH | 7.5 | 0.3% | Oct 6, 2026 | Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Inc... |
| CVE-2026-42637 | MEDIUM | 6.5 | 0.3% | Oct 6, 2026 | Unauthenticated Settings Change in PayPlug for WooCommerce (Official) <= 3.1.0 versions. |
| CVE-2026-42636 | HIGH | 7.1 | 0.3% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.4.6 versions. |
| CVE-2026-42635 | HIGH | 7.1 | 0.3% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in WooCommerce Simple Auctions <= 3.0.10 versions. |
| CVE-2026-42634 | HIGH | 7.1 | 0.3% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in Video Background Block – Use video as background in the section. <= 2.0.3 ... |
| CVE-2026-42418 | HIGH | 7.1 | 0.3% | Oct 6, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Socialrocket Socia... |