CVE search
401,251 resultsCVE-2026-103227MEDIUMGPAC DASH Client dash_client.c gf_dash_resolve_url buffer overflowEPSS 0.5%CVE-2026-103389MEDIUMMISP Stored Cross-Site Scripting via Unvalidated Galaxy Icon Field in Correlation GraphEPSS 0.3%CVE-2026-103388MEDIUMMISP Stored Cross-Site Scripting via JavaScript URL in Galaxy Cluster Source FieldEPSS 0.2%CVE-2026-18782CRITICALSQL Injection in Trex Digital Manufacturing's Trex MESEPSS 0.5%CVE-2026-103226MEDIUMArtifex Ghostscript Pdfwrite gdevpsfx.c type1_callsubr stack-based overflowEPSS 0.4%CVE-2026-18783HIGHMissing Server-Side Authentication on REST API Endpoint in Trex Digital Manufacturing's Trex MESEPSS 0.4%CVE-2026-97259MEDIUMWordPress Pay with Vipps for WooCommerce plugin <= 6.2.4 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-101295HIGHOc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extractionEPSS 0.1%CVE-2026-62084MEDIUMWordPress User Submitted Posts plugin <= 20260810 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-62097HIGHWordPress Business Directory plugin <= 6.4.27 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-103222MEDIUMBlosc C-Blosc2 blosclz Decompression blosclz.c blosclz_decompress integer overflowEPSS 0.3%CVE-2026-93903CRITICALLiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case."EPSS 0.3%CVE-2026-103118MEDIUMGraphicsMagick WPG File wpg.c ExtractPostscript recursionEPSS 0.3%CVE-2026-82307CRITICALMultiple Vulnerabilities in Dolusoft Software's SOPLOGEPSS 0.3%CVE-2026-93547MEDIUMMissing Authorization Check in Vaadin Spreadsheet Allows Cell Comments to Be Written to Protected Sheets and Locked CellsEPSS 0.4%CVE-2026-91860MEDIUMPrototype Pollution in Vaadin Charts and Component Base via Unfiltered Deep MergeEPSS 0.5%CVE-2026-76504CRITICALCisco Catalyst SD-WAN Manager System Account Authorization Bypass VulnerabilityEPSS 1.6%KEVCVE-2026-103117MEDIUMOS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injectionEPSS 0.3%CVE-2026-86778MEDIUMUsername Enumeration in Maksisoft Technology's Maksisoft GymEPSS 0.2%CVE-2026-103116MEDIUMOS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injectionEPSS 0.3%