Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

MEDIUM 6.5 CVE-2026-11965 The User Registration & Membership WordPress plugin before 5.2.0 does not enforce payment completion before activating a paid membership subscriptio… Mitigation only Fix from $1,6002026-07-02 MEDIUM 6.4 CVE-2026-10089 The Insert Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post custom field keys (meta key names) in all versions up to,… Mitigation only Fix from $1,6002026-07-02 MEDIUM 6.8 CVE-2026-10077 The yootheme WordPress theme before 5.0.35 does not prevent its bundled front-end framework from treating certain HTML attributes, which are permitte… Mitigation only Fix from $1,6002026-07-02 HIGH 8.3 CVE-2026-57278 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 HIGH 8.3 CVE-2026-57277 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 HIGH 8.3 CVE-2026-57276 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 HIGH 8.3 CVE-2026-57275 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 HIGH 8.3 CVE-2026-57274 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 HIGH 8.3 CVE-2026-57273 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 HIGH 8.3 CVE-2026-57272 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 HIGH 8.3 CVE-2026-57271 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… No fix yet Fix from $1,9502026-07-02 HIGH 8.3 CVE-2026-57270 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 HIGH 8.3 CVE-2026-57269 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 HIGH 8.3 CVE-2026-57268 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 HIGH 8.3 CVE-2026-57267 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 HIGH 8.3 CVE-2026-57266 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 HIGH 8.3 CVE-2026-57265 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 HIGH 8.3 CVE-2026-57264 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 HIGH 8.3 CVE-2026-13132 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 HIGH 8.3 CVE-2026-13131 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 HIGH 8.8 CVE-2026-13125 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoV… Mitigation only Fix from $1,9502026-07-02 MEDIUM 6.8 CVE-2026-14440 Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset f… Mitigation only Fix from $1,6002026-07-01 CRITICAL 9.4 CVE-2026-14439 A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise Server and Altium 365. The service accepts a sequence … Mitigation only Fix from $2,3002026-07-01 HIGH 7.5 CVE-2026-52190 Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_448… Mitigation only Fix from $1,9502026-07-01 CRITICAL 9.8 CVE-2026-52186 SQL Injection vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to execute arbitrary code via the gohead/sub_463bbc c… Mitigation only Fix from $2,3002026-07-01 HIGH 7.5 CVE-2026-38891 An improper input validation in the gazebo_ros_diff_drive.cpp component of gazebo_plugins v3.9.0 allows attackers to cause a Denial of Service (DoS) … Mitigation only Fix from $1,9502026-07-01 HIGH 7.5 CVE-2026-36912 A NULL pointer dereference in the AP4_AtomSampleTable::GetSample() function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a … Mitigation only Fix from $1,9502026-07-01 MEDIUM 5.5 CVE-2026-36911 A division-by-zero vulnerability in the CStreamSwitcherOutputPin::DecideBufferSize function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attac… Mitigation only Fix from $1,6002026-07-01 MEDIUM 5.5 CVE-2026-36910 An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service… Mitigation only Fix from $1,6002026-07-01 MEDIUM 6.2 CVE-2026-36909 A NULL pointer dereference in the AP4_TkhdAtom::GetTrackId() function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial… Mitigation only Fix from $1,6002026-07-01