CVE Vulnerability Database
Search and browse 425,064 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-104808 | LOW | 1.9 | 0.2% | Oct 5, 2026 | DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious us... |
| CVE-2026-104807 | LOW | 1.9 | 0.2% | Oct 5, 2026 | DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious us... |
| CVE-2026-104806 | MEDIUM | 5.5 | 0.3% | Oct 5, 2026 | DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the inten... |
| CVE-2026-104805 | HIGH | 8.5 | 0.2% | Oct 5, 2026 | DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access... |
| CVE-2026-104706 | HIGH | 8.4 | 0.1% | Oct 5, 2026 | DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over ... |
| CVE-2026-104675 | MEDIUM | 4.3 | 0.2% | Oct 5, 2026 | Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly ... |
| CVE-2026-104673 | MEDIUM | 6.5 | 0.2% | Oct 5, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar MP3 Audio P... |
| CVE-2026-104409 | MEDIUM | 6.5 | 0.2% | Oct 5, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Image Pho... |
| CVE-2026-104408 | HIGH | 7.6 | 0.3% | Oct 5, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Groundh... |
| CVE-2026-104407 | HIGH | 7.1 | 0.1% | Oct 5, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Cross Site... |
| CVE-2026-104404 | MEDIUM | 6.5 | 0.2% | Oct 5, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell... |
| CVE-2026-104401 | MEDIUM | 4.3 | 0.2% | Oct 5, 2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Memberful Memberful - Member... |
| CVE-2026-104400 | MEDIUM | 6.5 | 0.2% | Oct 5, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks ... |
| CVE-2026-104397 | MEDIUM | 5.3 | 0.2% | Oct 5, 2026 | Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configu... |
| CVE-2026-104396 | MEDIUM | 6.5 | 0.2% | Oct 5, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Peters Name... |
| CVE-2026-104389 | HIGH | 8.5 | 0.3% | Oct 5, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sirv Sirv sirv all... |
| CVE-2026-104388 | MEDIUM | 5.3 | 0.2% | Oct 5, 2026 | Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Retrieve Embedded Sens... |
| CVE-2026-104386 | MEDIUM | 6.5 | 0.1% | Oct 5, 2026 | Missing Authorization vulnerability in WPFunnels Team WP VR wpvr allows Exploiting Incorrectly Configured Access Control... |
| CVE-2026-103512 | MEDIUM | 5.3 | 0.4% | Oct 5, 2026 | Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address when validating certain authentication requests. A... |
| CVE-2026-103511 | MEDIUM | 5.1 | 0.3% | Oct 5, 2026 | Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An att... |
| CVE-2026-103510 | CRITICAL | 9.5 | 0.3% | Oct 5, 2026 | P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configura... |
| CVE-2026-103507 | HIGH | 7.5 | 0.5% | Oct 5, 2026 | Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. A... |
| CVE-2026-103351 | MEDIUM | 5.3 | 0.2% | Oct 5, 2026 | Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce... |
| CVE-2026-103335 | MEDIUM | 5.3 | 0.3% | Oct 5, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in Deepen Bajracharya Video Conferencing with Zoom video... |
| CVE-2026-103084 | MEDIUM | 6.5 | 0.2% | Oct 5, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium A... |