CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-104617 | MEDIUM | 5.1 | There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak th… | — |
|
2026-10-15 |
| CVE-2025-23390 | MEDIUM | 6.3 | A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a… | — |
|
2026-10-15 |
| CVE-2026-108092 | MEDIUM | 4.3 | The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure … | — |
|
2026-10-15 |
| CVE-2026-92429 | MEDIUM | 5.3 | The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a pa… | — |
|
2026-10-15 |
| CVE-2026-92428 | MEDIUM | 5.3 | The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a pa… | — |
|
2026-10-15 |
| CVE-2026-76668 | MEDIUM | 6.3 | A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped… | — |
|
2026-10-15 |
| CVE-2026-24723 | MEDIUM | 6.5 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote att… | — |
|
2026-10-15 |
| CVE-2026-24722 | MEDIUM | 6.5 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote att… | — |
|
2026-10-15 |
| CVE-2026-24721 | MEDIUM | 6.5 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote att… | — |
|
2026-10-15 |
| CVE-2026-11905 | MEDIUM | 4.3 | The Elementor Website Builder – more than just a page builder plugin for WordPress is vulnerable to … | — |
|
2026-10-15 |
| CVE-2026-110934 | MEDIUM | 4.4 | Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Mani… | — |
|
2026-10-15 |
| CVE-2026-110933 | MEDIUM | 4.4 | Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This … | — |
|
2026-10-15 |
| CVE-2026-106031 | MEDIUM | 6.5 | The Spin Wheel WordPress plugin before 2.2.1 does not verify that a visitor actually performed a le… | — |
|
2026-10-15 |
| CVE-2026-104643 | MEDIUM | 4.2 | The Easy HTTPS Redirection (SSL) WordPress plugin before 2.0.2 does not perform capability checks in… | — |
|
2026-10-15 |
| CVE-2026-103324 | MEDIUM | 5.3 | The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly verify… | — |
|
2026-10-15 |
| CVE-2026-103304 | MEDIUM | 5.3 | The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on… | — |
|
2026-10-15 |
| CVE-2026-101308 | MEDIUM | 5.5 | When an audio channel's buffer needs to be resized, the sound(4) driver checks that the buffer is no… | — |
|
2026-10-15 |
| CVE-2026-101302 | MEDIUM | 6.5 | TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally… | — |
|
2026-10-15 |
| CVE-2025-66275 | MEDIUM | 6.5 | A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains… | — |
|
2026-10-15 |
| CVE-2025-66272 | MEDIUM | 6.5 | A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains… | — |
|
2026-10-15 |