CVE Vulnerability Database
Search and browse 425,062 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-88396 | HIGH | 7.2 | 0.4% | Oct 5, 2026 | ApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint POST /admin/Index/upload i... |
| CVE-2026-88395 | CRITICAL | 9.8 | 0.4% | Oct 5, 2026 | GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter. |
| CVE-2026-88393 | CRITICAL | 9.8 | 0.1% | Oct 5, 2026 | WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data ... |
| CVE-2026-37719 | CRITICAL | 9.8 | 0.3% | Oct 5, 2026 | An issue in dormakaba evolo Service (all versions) allows a remote attacker to execute arbitrary code as SYSTEM via a .N... |
| CVE-2026-105397 | MEDIUM | 5.4 | 0.2% | Oct 5, 2026 | LearnPress plugin for WordPress through 4.4.9.1 contains a stored cross-site scripting vulnerability that allows authent... |
| CVE-2026-105329 | MEDIUM | 6.3 | 0.4% | Oct 5, 2026 | A vulnerability was determined in TallCMS up to 4.8.0. This affects an unknown function of the file packages/tallcms/cms... |
| CVE-2026-104892 | HIGH | 8.7 | — | Oct 5, 2026 | Plane is an open-source project management tool. Prior to 1.4.0, aPITokenLogMiddleware logs API keys in plaintext. This ... |
| CVE-2026-104891 | HIGH | 7.5 | 0.3% | Oct 5, 2026 | mppx-condition-gate provides conditional free-access wrappers for mppx payment methods. Prior to @insumermodel/mppx-cond... |
| CVE-2026-104890 | HIGH | 7.2 | 0.4% | Oct 5, 2026 | Kunstmaan CMS is an open source content management system based on the Symfony framework. Prior to 7.3.2, src/Kunstmaan/... |
| CVE-2026-102780 | CRITICAL | 9.8 | 0.3% | Oct 5, 2026 | Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.... |
| CVE-2026-102778 | MEDIUM | 6.1 | 0.2% | Oct 5, 2026 | Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extens... |
| CVE-2026-102776 | MEDIUM | 4.3 | 0.1% | Oct 5, 2026 | Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < ... |
| CVE-2026-102775 | HIGH | 7.5 | 0.4% | Oct 5, 2026 | Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 ... |
| CVE-2026-102428 | CRITICAL | 9.8 | 0.3% | Oct 5, 2026 | Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for r... |
| CVE-2026-102426 | MEDIUM | 6.1 | 0.3% | Oct 5, 2026 | Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6... |
| CVE-2026-89039 | MEDIUM | 6.5 | 0.4% | Oct 5, 2026 | A caller who can invoke the convert_playwright_script prompt in mcp-k6 can pass a bare file path as the playwright_scrip... |
| CVE-2026-88394 | HIGH | 7.5 | 0.2% | Oct 5, 2026 | WookTeam v1.6.6 and before is vulnerable to a Directory Traversal. The project task export endpoint /api/project/task/ex... |
| CVE-2026-88392 | HIGH | 7.5 | 0.2% | Oct 5, 2026 | Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local(). This allows an attacker to execute arbi... |
| CVE-2026-88391 | CRITICAL | 9.8 | 0.2% | Oct 5, 2026 | Northstar (dromara/northstar, quantitative trading platform) <= 9.1.1 enables the H2 Console but its auth interceptor on... |
| CVE-2026-79820 | CRITICAL | 9 | 0.3% | Oct 5, 2026 | A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware. |
| CVE-2026-105421 | MEDIUM | 5.3 | 0.2% | Oct 5, 2026 | Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) for WooCommerce convertkit-for-woocommerce allows E... |
| CVE-2026-92931 | HIGH | 8.8 | 0.3% | Oct 5, 2026 | CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 thro... |
| CVE-2026-77805 | HIGH | 7.9 | 0.1% | Oct 5, 2026 | In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the integrity check applied to t... |
| CVE-2026-77804 | MEDIUM | 6.6 | 0.1% | Oct 5, 2026 | In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, a time-of-check time-of-use (TOC... |
| CVE-2026-77803 | LOW | 3.6 | 0.1% | Oct 5, 2026 | In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, front-end request desynchronizat... |