CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-50218 | HIGH | 8.5 | Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT t… | — |
|
2026-10-14 |
| CVE-2026-110459 | HIGH | 8.6 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability … | — |
|
2026-10-14 |
| CVE-2026-110455 | HIGH | 8.1 | A malicious actor with access to the network and under certain conditions could exploit an Improper … | — |
|
2026-10-14 |
| CVE-2026-110450 | HIGH | 8.0 | Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it… | — |
|
2026-10-14 |
| CVE-2026-106931 | HIGH | 7.8 | SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker… |
T1190
T1059
+1
|
|
2026-10-14 |
| CVE-2026-105429 | HIGH | 8.0 | Improper neutralization of special elements in the NetBird client SSH configuration manager (client/… | — |
|
2026-10-14 |
| CVE-2026-101924 | HIGH | 7.2 | The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to… | — |
|
2026-10-14 |
| CVE-2026-97398 | HIGH | 7.2 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… | — |
|
2026-10-14 |
| CVE-2026-96661 | HIGH | 7.5 | The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gme… | — |
|
2026-10-14 |
| CVE-2026-95816 | HIGH | 7.2 | The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to … |
T1190
T1059
+1
|
|
2026-10-14 |
| CVE-2026-95808 | HIGH | 7.5 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is v… | — |
|
2026-10-14 |
| CVE-2026-94377 | HIGH | 7.2 | The Verified Reviews (Avis Vérifiés) plugin for WordPress is vulnerable to Stored Cross-Site Scripti… | — |
|
2026-10-14 |
| CVE-2026-93885 | HIGH | 7.2 | The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to S… | — |
|
2026-10-14 |
| CVE-2026-83592 | HIGH | 7.2 | The Contact Form DB for Enfold plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… | — |
|
2026-10-14 |
| CVE-2026-78193 | HIGH | 7.5 | The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via… | — |
|
2026-10-14 |
| CVE-2026-77114 | HIGH | 7.2 | The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dg_thumb… | — |
|
2026-10-14 |
| CVE-2026-110449 | HIGH | 7.5 | Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write w… |
T1190
T1203
|
|
2026-10-14 |
| CVE-2026-100153 | HIGH | 7.2 | The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY_ST… |
T1078
T1548
|
|
2026-10-14 |
| CVE-2026-14765 | HIGH | 7.7 | Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configurat… | — |
|
2026-10-14 |
| CVE-2026-110445 | HIGH | 8.8 | TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthentica… | — |
|
2026-10-14 |