CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-18586 | HIGH | 7.2 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Unauthen… | — |
|
2026-10-15 |
| CVE-2026-18548 | HIGH | 7.2 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to St… | — |
|
2026-10-15 |
| CVE-2026-17031 | HIGH | 8.1 | The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to … | — |
|
2026-10-15 |
| CVE-2026-15090 | HIGH | 7.5 | The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'link_url' p… | — |
|
2026-10-15 |
| CVE-2026-76665 | HIGH | 7.1 | A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buff… | — |
|
2026-10-15 |
| CVE-2026-3712 | HIGH | 7.3 | The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up … | — |
|
2026-10-15 |
| CVE-2026-76663 | HIGH | 7.5 | A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that … | — |
|
2026-10-15 |
| CVE-2026-110908 | HIGH | 8.8 | Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS comm… | — |
|
2026-10-15 |
| CVE-2026-110907 | HIGH | 7.5 | Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a smal… | — |
|
2026-10-15 |
| CVE-2026-77931 | HIGH | 8.8 | MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute… | — |
|
2026-10-15 |
| CVE-2026-76661 | HIGH | 7.6 | A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data. | — |
|
2026-10-15 |
| CVE-2026-76660 | HIGH | 8.7 | A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data. | — |
|
2026-10-15 |
| CVE-2026-76659 | HIGH | 7.5 | A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated … | — |
|
2026-10-15 |
| CVE-2026-76066 | HIGH | 7.5 | IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor validates … | — |
|
2026-10-15 |
| CVE-2026-73799 | HIGH | 7.5 | A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption | — |
|
2026-10-15 |
| CVE-2026-109430 | HIGH | 7.5 | Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerabilit… | — |
|
2026-10-15 |
| CVE-2026-0993 | HIGH | 7.5 | SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allow… | — |
|
2026-10-15 |
| CVE-2026-110873 | HIGH | 7.1 | Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared col… | — |
|
2026-10-14 |
| CVE-2026-110869 | HIGH | 7.5 | Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._action… | — |
|
2026-10-14 |
| CVE-2026-110868 | HIGH | 8.5 | Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to ma… | — |
|
2026-10-14 |