CVE Vulnerability Database
Search and browse 425,058 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-89289 | MEDIUM | 5.3 | 0.1% | Oct 6, 2026 | The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfi... |
| CVE-2026-86786 | MEDIUM | 5.3 | 0.1% | Oct 6, 2026 | The Slider Pro WordPress plugin through 1.0.0 does not perform any capability or authorisation check on one of its AJAX ... |
| CVE-2026-59358 | HIGH | 7.6 | 0.3% | Oct 6, 2026 | Improper authentication (CWE-287) in the OAuth token endpoint in Cloud Foundry UAA allows a remote, authenticated attack... |
| CVE-2026-59357 | MEDIUM | 6.5 | 0.2% | Oct 6, 2026 | Insufficient verification of data authenticity (CWE-345) in the external OIDC login callback in Cloud Foundry UAA v4.5.0... |
| CVE-2026-57559 | HIGH | 7.8 | 0.1% | Oct 6, 2026 | Memory corruption while processing service requests. |
| CVE-2026-57555 | HIGH | 7.8 | 0.1% | Oct 6, 2026 | Memory Corruption when executing system service routines due to improper handling of user input buffers. |
| CVE-2026-57554 | HIGH | 7.8 | 0.1% | Oct 6, 2026 | Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocat... |
| CVE-2026-57546 | HIGH | 7.5 | 0.3% | Oct 6, 2026 | Transient DOS when processing a continuous receive command with a zero-sized global configuration override. |
| CVE-2026-57545 | HIGH | 7.8 | 0.1% | Oct 6, 2026 | Memory corruption when processing draw objects of incorrect type during graphics command list execution. |
| CVE-2026-57537 | HIGH | 7.8 | 0.1% | Oct 6, 2026 | Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization. |
| CVE-2026-25302 | HIGH | 7.1 | 0.1% | Oct 6, 2026 | Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsig... |
| CVE-2026-25291 | HIGH | 7.8 | 0.1% | Oct 6, 2026 | Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronizatio... |
| CVE-2026-25274 | MEDIUM | 6.7 | 0.1% | Oct 6, 2026 | Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronizat... |
| CVE-2026-25273 | MEDIUM | 6.7 | 0.1% | Oct 6, 2026 | Memory Corruption when processing camera operations due to out-of-bounds write during driver updates. |
| CVE-2026-25272 | MEDIUM | 6.7 | 0.1% | Oct 6, 2026 | Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware u... |
| CVE-2026-25270 | MEDIUM | 6.7 | 0.1% | Oct 6, 2026 | Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver. |
| CVE-2026-25269 | MEDIUM | 6.7 | 0.1% | Oct 6, 2026 | Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated me... |
| CVE-2026-25267 | HIGH | 7.8 | 0.1% | Oct 6, 2026 | Memory corruption when non-secure loader rewrites page tables before secure memory initialization. |
| CVE-2026-25263 | MEDIUM | 6.6 | 0.1% | Oct 6, 2026 | Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters. |
| CVE-2026-105778 | CRITICAL | 9.9 | 0.5% | Oct 6, 2026 | A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of ... |
| CVE-2026-105776 | HIGH | 7.3 | 0.3% | Oct 6, 2026 | A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b... |
| CVE-2026-105701 | HIGH | 8.8 | 0.5% | Oct 6, 2026 | The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0... |
| CVE-2026-97300 | MEDIUM | 6.5 | 0.2% | Oct 6, 2026 | Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions. |
| CVE-2026-75962 | HIGH | 7.2 | 0.3% | Oct 6, 2026 | The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin... |
| CVE-2026-41563 | HIGH | 7.5 | 0.2% | Oct 6, 2026 | Unauthenticated Sensitive Data Exposure in Sitemovr <= 1.0.1 versions. |