CVE search

401,023 results
CVE-2026-79896HIGHFortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerabilityEPSS 0.3%CVE-2026-17053MEDIUMSMBus callback-removal syscalls accept an unvalidated user pointer, letting user threads manipulate kernel callback stateEPSS 0.1%CVE-2026-67106MEDIUMHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-56599LOWHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.1%CVE-2026-67104MEDIUMHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-67105HIGHHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-79898CRITICALFortra BoKS Manager crlserver command injection vulnerabilityEPSS 1.0%CVE-2026-56589HIGHHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-97280MEDIUMWordPress Review Schema plugin 3.1.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-103004MEDIUMnext.js cache leak on warm `use cache` handlers accessing root paramEPSS 0.3%CVE-2026-79899HIGHFortra BoKS Manager bccgethostcert insecure temporary file vulnerabilityEPSS 0.1%CVE-2026-103347MEDIUMWordPress hCaptcha for WP plugin <= 5.3.0 - Bypass Vulnerability vulnerabilityEPSS 0.2%CVE-2026-103068HIGHWordPress ByteCoreStack – MCP Connector for AI Tools plugin <= 1.2.2 - Privilege Escalation vulnerabilityEPSS 0.2%CVE-2026-102378HIGHWordPress Parallax Section block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-100517HIGHWordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-100514HIGHWordPress REST API Log plugin <= 1.7.2 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-97297HIGHWordPress Gratisfaction plugin <= 4.6.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-97284HIGHWordPress Icegram plugin <= 3.1.31 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-97281MEDIUMWordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-97277HIGHWordPress Social Boost plugin <= 3.6.2 - Broken Access Control vulnerabilityEPSS 0.3%