CVE Vulnerability Database
Search and browse 425,064 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105145 | MEDIUM | 5.3 | 0.3% | Oct 4, 2026 | A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function get_environ... |
| CVE-2026-97276 | HIGH | 7.1 | 0.1% | Oct 4, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Stat... |
| CVE-2026-105144 | MEDIUM | 5.3 | 0.5% | Oct 4, 2026 | A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function StaticFileRouter::route ... |
| CVE-2026-105141 | MEDIUM | 6.3 | 0.3% | Oct 4, 2026 | A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function get_user_id_... |
| CVE-2026-105137 | MEDIUM | 5 | 0.1% | Oct 4, 2026 | A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of th... |
| CVE-2026-103355 | CRITICAL | 9.3 | 0.3% | Oct 4, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements... |
| CVE-2026-103354 | HIGH | 7.1 | 0.1% | Oct 4, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell... |
| CVE-2026-103344 | HIGH | 7.1 | 0.1% | Oct 4, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements... |
| CVE-2026-103062 | HIGH | 7.1 | 0.1% | Oct 4, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Transla... |
| CVE-2026-97332 | MEDIUM | 5.3 | 0.2% | Oct 4, 2026 | The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite in... |
| CVE-2026-93549 | HIGH | 8.8 | 0.1% | Oct 4, 2026 | The CoCart WordPress plugin before 4.9.7 does not scope its REST API authentication filter to its own endpoints, which ... |
| CVE-2026-86817 | MEDIUM | 4.9 | 0.2% | Oct 4, 2026 | The Five Star Business Profile and Schema WordPress plugin before 2.4.0 does not properly restrict the callbacks used to... |
| CVE-2026-17005 | MEDIUM | 6.8 | 0.2% | Oct 4, 2026 | The Horizontal scrolling announcements WordPress plugin through 2.6 does not sanitise and escape one of its announcement... |
| CVE-2026-105135 | CRITICAL | 10 | 0.8% | Oct 4, 2026 | A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the ... |
| CVE-2026-105134 | CRITICAL | 10 | 86.3% | Oct 4, 2026 | A flaw has been found in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This vulnerability affects unknown code of the file /... |
| CVE-2026-105133 | HIGH | 7.3 | 79.2% | Oct 4, 2026 | A vulnerability was detected in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This affects the function checkSysPwd of the f... |
| CVE-2026-104119 | LOW | 3.5 | 0.1% | Oct 4, 2026 | The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputti... |
| CVE-2026-104118 | MEDIUM | 5.3 | 0.2% | Oct 4, 2026 | The Razorpay for WooCommerce WordPress plugin before 4.8.8 does not perform ownership or authorization checks on a REST ... |
| CVE-2026-105099 | LOW | 3.5 | 0.2% | Oct 4, 2026 | A weakness has been identified in Omega Solution CoinEx Crypto 2025. Affected by this vulnerability is an unknown functi... |
| CVE-2026-88779 | HIGH | 7.5 | 0.3% | Oct 4, 2026 | Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, bef... |
| CVE-2026-105098 | MEDIUM | 4.3 | 0.3% | Oct 4, 2026 | A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /t... |
| CVE-2026-105097 | MEDIUM | 4.3 | 0.3% | Oct 4, 2026 | A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /custo... |
| CVE-2026-105131 | MEDIUM | 5.4 | 0.2% | Oct 4, 2026 | ezBookkeeping 1.2.0 before 2.0.1 contains a privilege escalation vulnerability that allows attackers holding an API toke... |
| CVE-2026-105096 | MEDIUM | 6.3 | 0.3% | Oct 4, 2026 | A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /custo... |
| CVE-2026-105130 | LOW | 3.7 | 0.2% | Oct 4, 2026 | LaraDashboard from 1.4.0 before 1.4.8 contains a race condition vulnerability in RegisterController::register that allow... |