|
cve-2026-110447
|
CVE-2026-110447 |
CRITICAL
|
9.2
|
73.31%
|
cvelistv5 |
|
|
cve-2026-106931
|
CVE-2026-106931 |
HIGH
|
8.5
|
2.53%
|
cvelistv5 |
|
|
cve-2026-103671
|
External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay ... |
MEDIUM
|
5.3
|
0.24%
|
cvelistv5 |
2026-10-15 |
|
cve-2026-0322
|
Palo Alto Networks PAN-OS Code Injection Vulnerability |
HIGH
|
8.6
|
1.74%
|
cvelistv5 |
2026-10-14 |
|
cve-2025-61624
|
CVE-2025-61624 |
MEDIUM
|
6.0
|
1.34%
|
cvelistv5 |
|
|
cve-2025-41450
|
Authentication Bypass by Primary Weakness |
HIGH
|
8.2
|
0.95%
|
cvelistv5 |
2026-10-14 |
|
cve-2024-56337
|
SUSE CVE CVE-2024-56337 |
HIGH
|
8.1
|
8.97%
|
cvelistv5 |
2026-10-10 |
|
cve-2026-96951
|
CVE-2026-96951 |
HIGH
|
8.8
|
9.81%
|
cvelistv5 |
|
|
cve-2026-9290
|
wpusermanager wp_user_manager Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
N/A
|
2.50%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-8809
|
acfextended advanced_custom_fields_extended Improper Privilege Management |
HIGH
|
N/A
|
0.80%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-86444
|
thimpress learnpress Improper Neutralization of Input During Web Page Generation |
HIGH
|
7.1
|
0.28%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-8441
|
Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
7.5
|
0.46%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-78175
|
Themeum tutor_lms Deserialization of Untrusted Data |
HIGH
|
8.8
|
1.07%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-75927
|
Improper Privilege Management |
HIGH
|
7.2
|
0.64%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-6895
|
Improper Privilege Management |
HIGH
|
N/A
|
0.25%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-66439
|
BeRocket advanced_ajax_product_filters Improper Neutralization of Input During Web Page Generation |
HIGH
|
7.1
|
0.25%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-6279
|
theme-fusion avada_builder Improper Neutralization of Special Elements in Output Used by a Downstream Component |
HIGH
|
N/A
|
9.88%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-6228
|
dynamiapps frontend_admin Improper Privilege Management |
HIGH
|
N/A
|
0.44%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-57812
|
Missing Authorization |
MEDIUM
|
6.5
|
0.33%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-5737
|
Server-Side Request Forgery |
HIGH
|
N/A
|
0.37%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-57345
|
Improper Neutralization of Input During Web Page Generation |
HIGH
|
7.1
|
0.25%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-54188
|
Crocoblock JetEngine Improper Neutralization of Input During Web Page Generation |
HIGH
|
7.1
|
0.14%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-5324
|
brizy brizy Improper Neutralization of Input During Web Page Generation |
HIGH
|
N/A
|
0.40%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-52714
|
squirrly seo_plugin_by_squirrly_seo Missing Authorization |
HIGH
|
N/A
|
0.17%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-49780
|
Incorrect Privilege Assignment |
HIGH
|
8.8
|
0.28%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-49772
|
Improper Neutralization of Special Elements used in an SQL Command |
CRITICAL
|
9.3
|
1.94%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-49058
|
Incorrect Privilege Assignment |
CRITICAL
|
9.8
|
0.32%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-48966
|
FunnelKit funnel_builder Improper Neutralization of Input During Web Page Generation |
HIGH
|
7.1
|
0.18%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-48866
|
gravityforms gravity_forms Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
N/A
|
0.47%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-4885
|
Unrestricted Upload of File with Dangerous Type |
HIGH
|
N/A
|
0.95%
|
cvelistv5 |
2026-10-13 |
ndaal KEV