CVE search
401,074 resultsCVE-2026-103387MEDIUMgarycourt uri-js Mailto Header mailto.ts URI.parse uncaught exceptionEPSS 0.3%CVE-2026-102990HIGHbasic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)EPSS 0.4%CVE-2026-103547CRITICALIn ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, delegated BSD authentication results are correlated only by the LDAP chEPSS 0.4%CVE-2026-101885HIGHZeroClaw before 0.8.5 Path Traversal via Plugin Manifest wasm_pathEPSS 0.2%CVE-2026-101884HIGHOpenClaw Windows Node before 2026.7.1 Remote Code Execution via Environment OverrideEPSS 0.5%CVE-2026-101883MEDIUMOpenClaw Windows Node through 2026.9.4 SSRF via canvas.presentEPSS 0.2%CVE-2026-101882HIGHOpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.setEPSS 0.5%CVE-2026-101881HIGHOpenClaw Windows Node before 2026.7.1 Denial of ServiceEPSS 0.4%CVE-2026-101880HIGHOpenClaw Windows Node before 2026.7.1 Authorization BypassEPSS 0.7%CVE-2026-101879HIGHOpenClaw Windows Node before 2026.7.1-3 Missing AuthorizationEPSS 0.3%CVE-2026-103399MEDIUMLibsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue bodyEPSS 0.2%CVE-2026-102392HIGHWordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-102391HIGHWordPress JetFormBuilder plugin <= 3.6.5.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-102377HIGHWordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-102376HIGHWordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-102375MEDIUMWordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-100512CRITICALWordPress Nested Pages plugin <= 3.3.2 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-100510HIGHWordPress Post and Page Builder by BoldGrid plugin <= 1.27.14 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-97291HIGHWordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-97290HIGHWordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.36 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%