CVE Vulnerability Database
Search and browse 425,062 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-103337 | MEDIUM | 6.5 | 0.2% | Oct 5, 2026 | Missing Authorization vulnerability in Kirillbdev WC Ukraine Shipping wc-ukr-shipping allows Exploiting Incorrectly Conf... |
| CVE-2026-103066 | HIGH | 8.5 | 0.3% | Oct 5, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Bo... |
| CVE-2026-100511 | HIGH | 8.8 | 0.4% | Oct 5, 2026 | Deserialization of Untrusted Data vulnerability in Vektor Inc. VK Google Job Posting Manager vk-google-job-posting-manag... |
| CVE-2026-100506 | HIGH | 7.2 | 0.4% | Oct 5, 2026 | Deserialization of Untrusted Data vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Object Injection.... |
| CVE-2026-97309 | HIGH | 7.1 | 0.2% | Oct 5, 2026 | Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Retrieve Embedded Sensit... |
| CVE-2026-97305 | MEDIUM | 6.9 | 0.3% | Oct 5, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-li... |
| CVE-2026-97304 | MEDIUM | 6.5 | 0.2% | Oct 5, 2026 | Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Contr... |
| CVE-2026-97303 | HIGH | 7.6 | 0.2% | Oct 5, 2026 | Missing Authorization vulnerability in Apps Mav Scratch & Win – Giveaways and Contests scratch-win-giveaways-for-website... |
| CVE-2026-97283 | CRITICAL | 9.8 | 0.4% | Oct 5, 2026 | Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager al... |
| CVE-2026-97275 | MEDIUM | 5.3 | 0.2% | Oct 5, 2026 | Improper Validation of Specified Quantity in Input vulnerability in VillaTheme BuildKit – Product Builder for WooCommerc... |
| CVE-2026-97070 | MEDIUM | 6.9 | 0.3% | Oct 5, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting I... |
| CVE-2026-95166 | MEDIUM | 5.4 | 0.1% | Oct 5, 2026 | In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting (XSS) payloa... |
| CVE-2026-95165 | MEDIUM | 6.1 | 0.2% | Oct 5, 2026 | Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting (XSS) in the Organization name field. |
| CVE-2026-88424 | CRITICAL | 9.8 | 0.1% | Oct 5, 2026 | FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.Ge... |
| CVE-2026-58880 | HIGH | 7 | 0.1% | Oct 5, 2026 | In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. Thi... |
| CVE-2026-58865 | HIGH | 7.5 | 0.2% | Oct 5, 2026 | In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check.... |
| CVE-2026-58859 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escala... |
| CVE-2026-58856 | LOW | 3.3 | 0.1% | Oct 5, 2026 | In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a miss... |
| CVE-2026-58854 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation ... |
| CVE-2026-58841 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in ... |
| CVE-2026-58835 | HIGH | 8.8 | 0.2% | Oct 5, 2026 | In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead t... |
| CVE-2026-58834 | MEDIUM | 5.5 | 0.1% | Oct 5, 2026 | In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to i... |
| CVE-2026-58815 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to loca... |
| CVE-2026-55286 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This cou... |
| CVE-2026-55280 | HIGH | 8.8 | 0.2% | Oct 5, 2026 | In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote esca... |