CVE Vulnerability Database
Search and browse 425,064 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-71892 | MEDIUM | 6.9 | 0.2% | Oct 3, 2026 | In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.... |
| CVE-2026-71891 | HIGH | 7.1 | 0.2% | Oct 3, 2026 | In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicSc... |
| CVE-2026-71890 | HIGH | 8.7 | 0.2% | Oct 3, 2026 | In Bouncy Castle for Java before 1.86, validation of an MLS (RFC 9420) external commit's proposal list, org.bouncycastle... |
| CVE-2026-71889 | HIGH | 8.7 | 0.2% | Oct 3, 2026 | In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathR... |
| CVE-2026-71888 | HIGH | 8.7 | 0.1% | Oct 3, 2026 | In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorit... |
| CVE-2026-71887 | HIGH | 8.2 | 0.1% | Oct 3, 2026 | In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey who... |
| CVE-2026-71886 | HIGH | 8.2 | 0.2% | Oct 3, 2026 | In Bouncy Castle for Java before 1.86, the high-level OpenPGP certificate API accepted a third-party certification or tr... |
| CVE-2026-71885 | CRITICAL | 9.2 | 0.2% | Oct 3, 2026 | In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509... |
| CVE-2026-71883 | HIGH | 8.2 | 0.3% | Oct 3, 2026 | In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM... |
| CVE-2026-18040 | MEDIUM | 5.9 | 0.1% | Oct 3, 2026 | In Bouncy Castle for Java before 1.86, HQC leaked secret-derived data through two side channels: its GF(2^8) arithmetic ... |
| CVE-2026-92767 | MEDIUM | 6.4 | 0.2% | Oct 3, 2026 | The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode... |
| CVE-2026-92084 | CRITICAL | 9.1 | 0.5% | Oct 3, 2026 | The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shor... |
| CVE-2026-104982 | MEDIUM | 4.3 | 0.4% | Oct 3, 2026 | A flaw has been found in Linux Mint Xreader up to 4.6.5. This issue affects the function setup_document_content_list/g_s... |
| CVE-2026-97660 | HIGH | 7.2 | 0.3% | Oct 3, 2026 | The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo-* Ar... |
| CVE-2026-97343 | MEDIUM | 4.3 | 0.3% | Oct 3, 2026 | The Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to I... |
| CVE-2026-96267 | HIGH | 7.5 | 0.3% | Oct 3, 2026 | The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL Injection via the 'fullR... |
| CVE-2026-94505 | HIGH | 8.1 | 0.3% | Oct 3, 2026 | The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is vulnerable to authorization b... |
| CVE-2026-93896 | MEDIUM | 6.1 | 0.2% | Oct 3, 2026 | The WPFront Notification Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and... |
| CVE-2026-93889 | HIGH | 7.2 | 0.2% | Oct 3, 2026 | The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wp_m... |
| CVE-2026-92974 | MEDIUM | 6.1 | 0.2% | Oct 3, 2026 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Sc... |
| CVE-2026-87115 | CRITICAL | 9.1 | 0.9% | Oct 3, 2026 | The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion due to insuf... |
| CVE-2026-75028 | HIGH | 7.5 | 0.7% | Oct 3, 2026 | The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to Local Fi... |
| CVE-2026-18443 | HIGH | 8.8 | 0.4% | Oct 3, 2026 | The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic ... |
| CVE-2026-15795 | MEDIUM | 6.4 | 0.2% | Oct 3, 2026 | The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Script... |
| CVE-2026-11601 | MEDIUM | 5.3 | 0.4% | Oct 3, 2026 | The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to authoriz... |