Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
402,123 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-55240 | 9.1 Critical | Tianji: Remote Code Execution via lodash template evaluate pattern in survey feed templates | Oct 15, 2026 |
| CVE-2026-109689 | 5.3 Medium | WordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken Access Control vulnerability | Oct 15, 2026 |
| CVE-2026-55239 | 8.8 High | Tianji: SQL Injection via unsanitized timezone parameter in analytics queries | Oct 15, 2026 |
| CVE-2026-110360 | 5.3 Medium | WordPress Ajax Search Lite plugin <= 4.14.5 - Broken Access Control vulnerability | Oct 15, 2026 |
| CVE-2026-109897 | 5.4 Medium | WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability | Oct 15, 2026 |
| CVE-2026-63430 | 6.3 Medium | ammonia: mXSS in ammonia via MathML `annotation-xml` encoding strip | Oct 15, 2026 |
| CVE-2026-109869 | 7.5 High | undici vulnerable to Denial of Service via unhandled error on excessive content-encodings | Oct 15, 2026 |
| CVE-2026-110378 | 5.3 Medium | WordPress Ninja Forms Signature Contract Add-On plugin <= 3.2.5 - Broken Access Control vulnerability | Oct 15, 2026 |
| CVE-2026-96449 | 5.3 Medium | WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerability | Oct 15, 2026 |
| CVE-2026-106604 | 6.5 Medium | WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability | Oct 15, 2026 |
| CVE-2026-103083 | 5.4 Medium | WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - Insecure Direct Object References (IDOR) vulnerability | Oct 15, 2026 |
| CVE-2026-108175 | 6.5 Medium | WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability | Oct 15, 2026 |
| CVE-2026-110381 | 6.3 Medium | WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability | Oct 15, 2026 |
| CVE-2026-103350 | 5.3 Medium | WordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerability | Oct 15, 2026 |
| CVE-2026-110888 | 4.3 Medium | WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability | Oct 15, 2026 |
| CVE-2026-110891 | 5.4 Medium | WordPress WordLift plugin <= 3.54.15 - Broken Access Control vulnerability | Oct 15, 2026 |
| CVE-2026-110890 | 6.5 Medium | WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerability | Oct 15, 2026 |
| CVE-2026-110367 | 5.3 Medium | WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability | Oct 15, 2026 |
| CVE-2026-110371 | 4.3 Medium | WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability | Oct 15, 2026 |
| CVE-2026-111105 | 7.0 High | Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability | Oct 15, 2026 |
| CVE-2026-55414 | 5.3 Medium | NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF) | Oct 15, 2026 |
| CVE-2026-54683 | 6.5 Medium | NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user until 3.0.3 (incomplete fix of CVE-2026-49463) | Oct 15, 2026 |
| CVE-2026-103936 | 7.5 High | libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listeners | Oct 15, 2026 |
| CVE-2026-102740 | 5.8 Medium | AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink | Oct 15, 2026 |
| CVE-2026-55875 | 4.3 Medium | Helium: SSRF via External Calendar URL Allows Authenticated Users to Probe Internal Network | Oct 15, 2026 |
| CVE-2026-55876 | 3.5 Low | Helium: Stored XSS via Unrestricted SVG File Upload — Authenticated Users Can Store Executable Scripts | Oct 15, 2026 |
| CVE-2026-104266 | 6.5 Medium | tinytag: Infinite loop when parsing certain M4A files containing invalid atoms | Oct 15, 2026 |
| CVE-2026-61702 | 5.3 Medium | OpenPrinting CUPS: root-side banner file disclosure | Oct 15, 2026 |
| CVE-2026-55453 | 3.3 Low | CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip | Oct 15, 2026 |
| CVE-2026-84731 | 9.3 Critical | Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS | Oct 15, 2026 |
| CVE-2026-55480 | 5.7 Medium | CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root) | Oct 15, 2026 |
| CVE-2026-55467 | 2.5 Low | CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix) | Oct 15, 2026 |
| CVE-2026-55246 | 7.8 High | bincookie: Heap buffer overflow via unvalidated `num_pages` when parsing a `.binarycookies` file | Oct 15, 2026 |
| CVE-2026-55103 | 8.6 High | Discourse ActivityPub: Fix inbound actor validation and apply outbound request SSRF hardening | Oct 15, 2026 |
| CVE-2026-105065 | 7.1 High | WordPress XStore theme < 9.7.9 - Cross Site Scripting (XSS) vulnerability | Oct 15, 2026 |
| CVE-2026-100409 | 7.5 High | OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths | Oct 15, 2026 |
| CVE-2026-102527 | 6.9 Medium | Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes | Oct 15, 2026 |
| CVE-2026-102631 | 5.9 Medium | authd: Account takeover via username fallback in identity matching after IdP email reassignment | Oct 15, 2026 |
| CVE-2026-77466 | 8.3 High | Lychee: Webshop payment bypass via unrestricted "Dummy" gateway selection | Oct 15, 2026 |
| CVE-2026-77470 | 8.3 High | Lychee: Webshop checkout lets the client override the payment `amount` sent to the gateway via malicious crafted POST request | Oct 15, 2026 |
| CVE-2026-77468 | 6.9 Medium | Lychee: Missing Authentication for Critical Function and Allocation of Resources Without Limits or Throttling on /docs/api | Oct 15, 2026 |
| CVE-2026-77467 | 7.1 High | Lychee: A single 383-byte PDF causes ~184 seconds of CPU consumption in the real processing path | Oct 15, 2026 |
| CVE-2026-110812 | 9.4 Critical | Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune | Oct 15, 2026 |
| CVE-2026-62679 | 8.9 High | Lychee: Path traversal in `SecurePathController` allows authenticated arbitrary file read | Oct 15, 2026 |
| CVE-2026-61838 | 8.2 High | Lychee: Album password bypass in ZIP downloads | Oct 15, 2026 |
| CVE-2026-61610 | 2.3 Low | Lychee: unauthenticated photo starring reveals existence of private photos when photos_star_visibility=anonymous | Oct 15, 2026 |
| CVE-2026-61611 | 7.5 High | Lychee: Missing rate limiting on album password unlock endpoint allows brute-force attacks | Oct 15, 2026 |
| CVE-2026-57569 | 2.3 Low | Lychee: Distinct post-fix SSRF variant in Photo::fromUrl due to missing IP pinning after DNS-based validation | Oct 15, 2026 |
| CVE-2026-57568 | 5.7 Medium | Lychee: Stored XSS via Markdown javascript: Links in Photo and Album Descriptions (Gallery View) | Oct 15, 2026 |
| CVE-2026-85634 | 8.8 High | Wildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment name | Oct 15, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.