CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-86803 | MEDIUM | 6.5 | The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versi… | — |
|
2026-10-15 |
| CVE-2026-78087 | MEDIUM | 6.4 | The VK Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Block 'lin… | — |
|
2026-10-15 |
| CVE-2026-78001 | MEDIUM | 6.4 | The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerab… | — |
|
2026-10-15 |
| CVE-2026-18557 | MEDIUM | 6.1 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Ref… | — |
|
2026-10-15 |
| CVE-2026-17001 | MEDIUM | 6.4 | The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Sc… | — |
|
2026-10-15 |
| CVE-2026-15180 | MEDIUM | 6.1 | The Tracking Code Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via '… | — |
|
2026-10-15 |
| CVE-2026-110926 | MEDIUM | 5.3 | A flaw was found in OpenSSH. When compression is negotiated, channels on the same connection share o… | — |
|
2026-10-15 |
| CVE-2026-110925 | MEDIUM | 5.4 | A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a n… | — |
|
2026-10-15 |
| CVE-2026-110923 | MEDIUM | 6.5 | A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a sla… | — |
|
2026-10-15 |
| CVE-2026-76667 | MEDIUM | 5.7 | A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read. | — |
|
2026-10-15 |
| CVE-2026-76666 | MEDIUM | 4.7 | A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read. | — |
|
2026-10-15 |
| CVE-2026-14572 | MEDIUM | 6.4 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable t… | — |
|
2026-10-15 |
| CVE-2026-76664 | MEDIUM | 6.4 | A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operati… | — |
|
2026-10-15 |
| CVE-2026-76662 | MEDIUM | 5.9 | A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS. | — |
|
2026-10-15 |
| CVE-2026-110909 | MEDIUM | 5.0 | Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP reques… | — |
|
2026-10-15 |
| CVE-2026-76656 | MEDIUM | 5.3 | A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker t… | — |
|
2026-10-15 |
| CVE-2026-110904 | MEDIUM | 5.3 | ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated … | — |
|
2026-10-15 |
| CVE-2026-110809 | MEDIUM | 4.3 | A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issu… | — |
|
2026-10-15 |
| CVE-2026-110872 | MEDIUM | 5.9 | Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability… | — |
|
2026-10-14 |
| CVE-2026-110871 | MEDIUM | 6.5 | Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.par… | — |
|
2026-10-14 |