Search

Expected end of text, found '.' (at char 17), (line:1, col:18)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (372566 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-61192 1 Oracle 1 Agile Engineering Data Management 2026-08-02 5.3 Medium
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Agile Engineering Data Management. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
CVE-2026-61194 1 Oracle 1 Agile Engineering Data Management 2026-08-02 6.5 Medium
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Core). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Agile Engineering Data Management. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
CVE-2026-24537 2 Alex Volkov, Wordpress 2 Wp Accessibility Helper, Wordpress 2026-08-02 4.3 Medium
Unauthenticated Cross Site Request Forgery (CSRF) in WP Accessibility Helper (WAH) <= 0.6.6 versions.
CVE-2026-27372 2 Peprodev, Wordpress 2 Peprodev Ultimate Invoice, Wordpress 2026-08-02 6.5 Medium
Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions.
CVE-2026-27391 2 Stylemixthemes, Wordpress 2 Ulisting, Wordpress 2026-08-02 5.4 Medium
Subscriber Broken Access Control in uListing <= 2.2.0 versions.
CVE-2026-27392 2 Stylemixthemes, Wordpress 2 Ulisting, Wordpress 2026-08-02 4.3 Medium
Contributor Broken Access Control in uListing <= 2.2.0 versions.
CVE-2026-27423 2 Rolandbarkerxnauwebdesign, Wordpress 2 Participants Database, Wordpress 2026-08-02 4.3 Medium
Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions.
CVE-2026-57367 2 Wordpress, Wpbookingsystem 2 Wordpress, Wp Booking System 2026-08-02 7.1 High
Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions.
CVE-2026-57701 2 Webcodingplace, Wordpress 2 Real Estate Manager, Wordpress 2026-08-02 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions.
CVE-2026-57717 2 Knit Pay, Wordpress 2 Knit Pay, Wordpress 2026-08-02 6.5 Medium
Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions.
CVE-2026-57767 2 Codecabin, Wordpress 2 Wp Google Maps, Wordpress 2026-08-02 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions.
CVE-2026-57784 2 Ninjaforms, Wordpress 2 Ninja Forms File Uploads, Wordpress 2026-08-02 9.6 Critical
Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension <= 3.3.26 versions.
CVE-2026-59513 2 Masteriyo, Wordpress 2 Masteriyo, Wordpress 2026-08-02 6.5 Medium
Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions.
CVE-2026-59524 2 Sandhillsdev, Wordpress 2 Easy Digital Downloads, Wordpress 2026-08-02 6.5 Medium
Unauthenticated Broken Authentication in Easy Digital Downloads <= 3.6.7 versions.
CVE-2026-59525 2 Rolandbarkerxnauwebdesign, Wordpress 2 Participants Database, Wordpress 2026-08-02 9.3 Critical
Unauthenticated SQL Injection in Participants Database <= 2.7.8.3 versions.
CVE-2026-59540 2 Cozyvision, Wordpress 2 Sms Alert Order Notifications, Wordpress 2026-08-02 9.8 Critical
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions.
CVE-2026-59544 2 Thrivethemes, Wordpress 2 Thrive Quiz Builder, Wordpress 2026-08-02 9.8 Critical
Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions.
CVE-2026-59545 2 Miniorange, Wordpress 2 Discord Integration, Wordpress 2026-08-02 8.1 High
Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 versions.
CVE-2026-59555 2 Rolandbarkerxnauwebdesign, Wordpress 2 Participants Database, Wordpress 2026-08-02 10 Critical
Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.3 versions.
CVE-2026-61943 2 Shahjada, Wordpress 2 Wpdm Premium Packages, Wordpress 2026-08-02 7.5 High
Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions.