Vulnerability Intelligence · All CVEs
Every Published CVE, Searchable.
Every published CVE keeps a row, so any identifier resolves to its severity, dates and exploitation status.
Synced hourly · figures as of Oct 19, 2026
391,982 vulnerabilities · newest first
- CVE-2026-110379High 7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Quiz Maker quiz-maker allows Reflected XSS.This issue affects Quiz Maker: from n/a through 6.7.1.91.Published Oct 19, 2026
- CVE-2026-108837UnscoredAllocation of resources without limits or throttling vulnerability in Apache Kylin.Published Oct 19, 2026
- CVE-2026-108833UnscoredDefault startup profile miss security settings in Apache Kylin.Published Oct 19, 2026
- CVE-2026-108823UnscoredExposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin.Published Oct 19, 2026
- CVE-2026-108780UnscoredPotential JDBC source configuration validation vulnerability in Apache Kylin.Published Oct 19, 2026
- CVE-2026-108776UnscoredImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin.Published Oct 19, 2026
- CVE-2026-108771UnscoredMissing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin.Published Oct 19, 2026
- CVE-2026-108766UnscoredMissing authorization on jdbc source config update in Apache Kylin.Published Oct 19, 2026
- CVE-2026-108764UnscoredServer-Side request forgery (SSRF) vulnerability in Apache Kylin.Published Oct 19, 2026
- CVE-2026-108762UnscoredPath-confinement bypass during metadata backup deletion in Apache Kylin.Published Oct 19, 2026
- CVE-2026-13695High 8.8SQL injection (SQLi) vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/ap_Login.aspx/start.Published Oct 19, 2026
- CVE-2026-112180Medium 5.1MISP contains a data integrity flaw in its event deletion logic.Published Oct 19, 2026
- CVE-2026-112179Medium 5.3In MISP, the event synchronization process contained a logic error in the preparation of event reports for remote push.Published Oct 19, 2026
- CVE-2026-112178High 7.1MISP contains an access control flaw in the proposal (shadow attribute) visibility logic.Published Oct 19, 2026
- CVE-2026-112161High 8.5MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity.Published Oct 19, 2026
- CVE-2026-112098Medium 5.3The manipulation results in code injection.Published Oct 19, 2026
- CVE-2026-112097Medium 5.1The manipulation of the…Published Oct 19, 2026
- CVE-2026-112096Medium 5.1The manipulation of…Published Oct 19, 2026
- CVE-2026-112095Medium 5.1Executing a manipulation of the argument…Published Oct 19, 2026
- CVE-2026-111438Medium 6.5在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hba_getauthmethod() 在处理 HADR/SW 复制发送方时，不要求 is_node_internal_connection()，直接调用 check_hba_replication()。check_hba_replication() 仅按 replication 标记做弱匹配，缺少普通 check_hba()…Published Oct 19, 2026
- CVE-2026-104679Medium 6.9VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references.Published Oct 19, 2026
- CVE-2026-112094Medium 5.1A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6.Published Oct 19, 2026
- CVE-2026-112093Medium 5.3The manipulation of the argument msg…Published Oct 19, 2026
- CVE-2026-112092Medium 5.3ExecutiPublished Oct 19, 2026
- CVE-2026-112091Medium 6.9A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d.Published Oct 19, 2026
- CVE-2026-112090Medium 5.3A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d.Published Oct 19, 2026
- CVE-2026-111439Medium 4.3在 openGauss-server的 src/common/backend/utils/adt/genfile.cpp 模块中，内置函数 pg_read_binary_file_blocks() 存在权限校验逻辑缺陷。该函数在入口处仅校验了起始块号（startBlockNum）和块数量（blockCount）的范围，随后直接调用底层文件读取例程 ReadBinaryFileBlocksFirstCall()。该底层例程仅执行了路径规范化检查以及针对 ..Published Oct 19, 2026
- CVE-2026-94294Medium 5.3The App Builder WordPress plugin before 5.7.1 does not require authentication or authorisation before writing attacker-supplied data to one of its options and, on a separate unauthenticated request, redirecting the visitor's browser to a…Published Oct 19, 2026
- CVE-2026-94272Medium 5.3The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status comes from an authorised source, allowing unauthenticated attackers to move any order into a paid state or force it to…Published Oct 19, 2026
- CVE-2026-94231Medium 5.3The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing unauthenticated users to create and modify booking services and categories, including their prices.Published Oct 19, 2026
- CVE-2026-94230Medium 5.3The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does not validate the submitted service price server-side, allowing unauthenticated users to create bookings at a price of…Published Oct 19, 2026
- CVE-2026-94229Medium 5.3The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its confirmation summary, allowing unauthenticated attackers to enumerate booking identifiers and retrieve the personal…Published Oct 19, 2026
- CVE-2026-94228Medium 5.3The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it does check is issued to unauthenticated visitors, allowing anyone to overwrite the plugin's entire…Published Oct 19, 2026
- CVE-2026-91831Low 3.8The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name setting before using it in e-mail headers, allowing users with Author-level access and above to inject arbitrary…Published Oct 19, 2026
- CVE-2026-86791Medium 5.3The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually completed before recording an order as paid, allowing unauthenticated users to mark any unpaid order as paid and to…Published Oct 19, 2026
- CVE-2026-76740High 7.2A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC.Published Oct 19, 2026
- CVE-2026-74922Medium 5.3The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endpoints when no shared secret has been configured, which is the default state, allowing unauthenticated users to…Published Oct 19, 2026
- CVE-2026-74921Medium 6.8The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before embedding them in a single-quoted HTML attribute in the rendered gallery markup, allowing users with the…Published Oct 19, 2026
- CVE-2026-16460High 7.4Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy.Published Oct 19, 2026
- CVE-2026-112089Medium 5.1A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d.Published Oct 19, 2026
- CVE-2026-112088Medium 5.3A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d.Published Oct 19, 2026
- CVE-2026-112087Medium 5.3A weakness has been identified in itsourcecode Online Cake Ordering System 1.0.Published Oct 19, 2026
- CVE-2026-110034Low 3.7The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a booking's total, allowing an unauthenticated visitor who knows a valid discount code to create a…Published Oct 19, 2026
- CVE-2026-106010Medium 5.3The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify the credentials on its public payment-status update route and treats unset credentials as valid, allowing unauthenticated attackers to mark arbitrary…Published Oct 19, 2026
- CVE-2026-103311Medium 5.3The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not verify the authenticity of incoming payment webhook notifications, because the shared secret used to validate the request signature is empty by…Published Oct 19, 2026
- CVE-2026-94273Medium 5.3The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved transaction before marking a WooCommerce order as paid, allowing unauthenticated attackers to…Published Oct 19, 2026
- CVE-2026-91047Medium 5.3The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any…Published Oct 19, 2026
- CVE-2026-91046Medium 4.3The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite…Published Oct 19, 2026
- CVE-2026-89286Medium 5.3The FormFlow for GoHighLevel (GHL) WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the publicly accessible uploads directory, allowing unauthenticated attackers to read its contents, which include…Published Oct 19, 2026
- CVE-2026-76739Medium 4.3A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to list and modify RMC filesystem.Published Oct 19, 2026
| CVE | Title | Severity | Published |
|---|---|---|---|
| CVE-2026-110379 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Quiz Maker quiz-maker allows Reflected XSS.This issue affects Quiz Maker: from n/a through 6.7.1.91. | High 7.1 | |
| CVE-2026-108837 | Allocation of resources without limits or throttling vulnerability in Apache Kylin. | Unscored | |
| CVE-2026-108833 | Default startup profile miss security settings in Apache Kylin. | Unscored | |
| CVE-2026-108823 | Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin. | Unscored | |
| CVE-2026-108780 | Potential JDBC source configuration validation vulnerability in Apache Kylin. | Unscored | |
| CVE-2026-108776 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. | Unscored | |
| CVE-2026-108771 | Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin. | Unscored | |
| CVE-2026-108766 | Missing authorization on jdbc source config update in Apache Kylin. | Unscored | |
| CVE-2026-108764 | Server-Side request forgery (SSRF) vulnerability in Apache Kylin. | Unscored | |
| CVE-2026-108762 | Path-confinement bypass during metadata backup deletion in Apache Kylin. | Unscored | |
| CVE-2026-13695 | SQL injection (SQLi) vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/ap_Login.aspx/start. | High 8.8 | |
| CVE-2026-112180 | MISP contains a data integrity flaw in its event deletion logic. | Medium 5.1 | |
| CVE-2026-112179 | In MISP, the event synchronization process contained a logic error in the preparation of event reports for remote push. | Medium 5.3 | |
| CVE-2026-112178 | MISP contains an access control flaw in the proposal (shadow attribute) visibility logic. | High 7.1 | |
| CVE-2026-112161 | MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. | High 8.5 | |
| CVE-2026-112098 | The manipulation results in code injection. | Medium 5.3 | |
| CVE-2026-112097 | The manipulation of the… | Medium 5.1 | |
| CVE-2026-112096 | The manipulation of… | Medium 5.1 | |
| CVE-2026-112095 | Executing a manipulation of the argument… | Medium 5.1 | |
| CVE-2026-111438 | 在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hba_getauthmethod() 在处理 HADR/SW 复制发送方时，不要求 is_node_internal_connection()，直接调用 check_hba_replication()。check_hba_replication() 仅按 replication 标记做弱匹配，缺少普通 check_hba()… | Medium 6.5 | |
| CVE-2026-104679 | VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. | Medium 6.9 | |
| CVE-2026-112094 | A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. | Medium 5.1 | |
| CVE-2026-112093 | The manipulation of the argument msg… | Medium 5.3 | |
| CVE-2026-112092 | Executi | Medium 5.3 | |
| CVE-2026-112091 | A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. | Medium 6.9 | |
| CVE-2026-112090 | A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. | Medium 5.3 | |
| CVE-2026-111439 | 在 openGauss-server的 src/common/backend/utils/adt/genfile.cpp 模块中，内置函数 pg_read_binary_file_blocks() 存在权限校验逻辑缺陷。该函数在入口处仅校验了起始块号（startBlockNum）和块数量（blockCount）的范围，随后直接调用底层文件读取例程 ReadBinaryFileBlocksFirstCall()。该底层例程仅执行了路径规范化检查以及针对 .. | Medium 4.3 | |
| CVE-2026-94294 | The App Builder WordPress plugin before 5.7.1 does not require authentication or authorisation before writing attacker-supplied data to one of its options and, on a separate unauthenticated request, redirecting the visitor's browser to a… | Medium 5.3 | |
| CVE-2026-94272 | The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status comes from an authorised source, allowing unauthenticated attackers to move any order into a paid state or force it to… | Medium 5.3 | |
| CVE-2026-94231 | The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing unauthenticated users to create and modify booking services and categories, including their prices. | Medium 5.3 | |
| CVE-2026-94230 | The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does not validate the submitted service price server-side, allowing unauthenticated users to create bookings at a price of… | Medium 5.3 | |
| CVE-2026-94229 | The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its confirmation summary, allowing unauthenticated attackers to enumerate booking identifiers and retrieve the personal… | Medium 5.3 | |
| CVE-2026-94228 | The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it does check is issued to unauthenticated visitors, allowing anyone to overwrite the plugin's entire… | Medium 5.3 | |
| CVE-2026-91831 | The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name setting before using it in e-mail headers, allowing users with Author-level access and above to inject arbitrary… | Low 3.8 | |
| CVE-2026-86791 | The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually completed before recording an order as paid, allowing unauthenticated users to mark any unpaid order as paid and to… | Medium 5.3 | |
| CVE-2026-76740 | A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC. | High 7.2 | |
| CVE-2026-74922 | The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endpoints when no shared secret has been configured, which is the default state, allowing unauthenticated users to… | Medium 5.3 | |
| CVE-2026-74921 | The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before embedding them in a single-quoted HTML attribute in the rendered gallery markup, allowing users with the… | Medium 6.8 | |
| CVE-2026-16460 | Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy. | High 7.4 | |
| CVE-2026-112089 | A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. | Medium 5.1 | |
| CVE-2026-112088 | A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. | Medium 5.3 | |
| CVE-2026-112087 | A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. | Medium 5.3 | |
| CVE-2026-110034 | The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a booking's total, allowing an unauthenticated visitor who knows a valid discount code to create a… | Low 3.7 | |
| CVE-2026-106010 | The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify the credentials on its public payment-status update route and treats unset credentials as valid, allowing unauthenticated attackers to mark arbitrary… | Medium 5.3 | |
| CVE-2026-103311 | The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not verify the authenticity of incoming payment webhook notifications, because the shared secret used to validate the request signature is empty by… | Medium 5.3 | |
| CVE-2026-94273 | The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved transaction before marking a WooCommerce order as paid, allowing unauthenticated attackers to… | Medium 5.3 | |
| CVE-2026-91047 | The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any… | Medium 5.3 | |
| CVE-2026-91046 | The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite… | Medium 4.3 | |
| CVE-2026-89286 | The FormFlow for GoHighLevel (GHL) WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the publicly accessible uploads directory, allowing unauthenticated attackers to read its contents, which include… | Medium 5.3 | |
| CVE-2026-76739 | A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to list and modify RMC filesystem. | Medium 4.3 |
Showing 151–200 of 391,982. Narrow the filters to see the rest.
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Every published CVE keeps a row, so any identifier resolves to its severity, dates and exploitation status. Filter by severity and year here; the other filters work on the curated lists.