Search
43,411 CVEs
CVEs (43,411, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 101–125 of 43,411 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↑ | Description |
|---|---|---|---|---|---|
| CVE-2025-59178 | NONE | — | 2026-07-27 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attac… | |
| CVE-2025-59180 | NONE | — | 2026-07-27 | Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with k… | |
| CVE-2025-59181 | NONE | — | 2026-07-27 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change … | |
| CVE-2026-10600 | MEDIUM | Patched | 4.3 | 2026-07-27 | Mattermost versions 11.8.x <= 11.8.0, 11.7.x <= 11.7.3, 11.6.x <= 11.6.5, 10.11.x <= 10.11.20 fail to bound the time and resource consumption of server-side document conten… |
| CVE-2026-10819 | MEDIUM | Patched | 6.5 | 2026-07-27 | Mattermost versions 11.6.x <= 11.6.5, 10.11.x <= 10.11.20, 11.8.x <= 11.8.1, 11.7.x <= 11.7.4 fail to limit the number of frames and enforce the file size cap on animated G… |
| CVE-2026-59527 | CRITICAL | 9.3 | 2026-07-27 | Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. | |
| CVE-2026-59528 | HIGH | 7.5 | 2026-07-27 | Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates <= 1.1.1 versions. | |
| CVE-2026-59529 | HIGH | 7.5 | 2026-07-27 | Unauthenticated Sensitive Data Exposure in Ebook Store <= 6.19 versions. | |
| CVE-2026-59530 | HIGH | 7.5 | 2026-07-27 | Unauthenticated Broken Access Control in Stripe For WooCommerce <= 4.0.7 versions. | |
| CVE-2026-59531 | HIGH | 7.5 | 2026-07-27 | Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions. | |
| CVE-2026-59532 | HIGH | 7.5 | 2026-07-27 | Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions. | |
| CVE-2026-59533 | CRITICAL | 9.3 | 2026-07-27 | Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions. | |
| CVE-2026-59534 | HIGH | 7.5 | 2026-07-27 | Unauthenticated Broken Access Control in Post My CF7 Form <= 6.2.0 versions. | |
| CVE-2026-59535 | HIGH | 7.3 | 2026-07-27 | Unauthenticated Broken Access Control in Thrive Product Manager <= 10.9.2 versions. | |
| CVE-2026-59536 | HIGH | 7.5 | 2026-07-27 | Unauthenticated Broken Access Control in CoCart – Headless ecommerce <= 4.8.4 versions. | |
| CVE-2026-59537 | HIGH | 7.6 | 2026-07-27 | Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions. | |
| CVE-2026-59538 | CRITICAL | 9.3 | 2026-07-27 | Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions. | |
| CVE-2026-59539 | HIGH | 7.5 | 2026-07-27 | Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions <= 3.0.7 versions. | |
| CVE-2026-59546 | HIGH | 7.4 | 2026-07-27 | Subscriber Broken Authentication in Hide My WP Ghost <= 7.0.06 versions. | |
| CVE-2026-59548 | HIGH | 7.5 | 2026-07-27 | Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking <= 1.0.0 versions. | |
| CVE-2026-59549 | CRITICAL | 9.3 | 2026-07-27 | Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. | |
| CVE-2026-59550 | CRITICAL | 9.3 | 2026-07-27 | Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions. | |
| CVE-2026-59551 | HIGH | 8.5 | 2026-07-27 | Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. | |
| CVE-2026-59552 | HIGH | 7.2 | 2026-07-27 | Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer & Embedder <= 1.4.2 versions. | |
| CVE-2026-59553 | HIGH | 7.1 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions. |