Total
417778 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-68883 | 2026-10-30 | N/A | 8.5 HIGH | ||
| Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-66026 | 2026-10-30 | N/A | N/A | ||
| Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |||||
| CVE-2026-66025 | 2026-10-30 | N/A | N/A | ||
| Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |||||
| CVE-2026-62131 | 2026-10-30 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions. | |||||
| CVE-2026-62016 | 2026-10-30 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Gamic <= 1.19 versions. | |||||
| CVE-2026-62015 | 2026-10-30 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions. | |||||
| CVE-2026-62014 | 2026-10-30 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions. | |||||
| CVE-2026-62011 | 2026-10-30 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions. | |||||
| CVE-2026-62010 | 2026-10-30 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions. | |||||
| CVE-2026-62009 | 2026-10-30 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions. | |||||
| CVE-2026-62005 | 2026-10-30 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions. | |||||
| CVE-2026-62004 | 2026-10-30 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Motorix <= 1.11 versions. | |||||
| CVE-2026-62003 | 2026-10-30 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Mission <= 1.22 versions. | |||||
| CVE-2026-61998 | 2026-10-30 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions. | |||||
| CVE-2026-61997 | 2026-10-30 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions. | |||||
| CVE-2026-61996 | 2026-10-30 | N/A | 8.5 HIGH | ||
| Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions. | |||||
| CVE-2026-61992 | 2026-10-30 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions. | |||||
| CVE-2026-61991 | 2026-10-30 | N/A | 10.0 CRITICAL | ||
| Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions. | |||||
| CVE-2026-61989 | 2026-10-30 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings <= 3.5.25 versions. | |||||
| CVE-2026-5461 | 2026-10-30 | N/A | 6.5 MEDIUM | ||
| The Forminator Forms plugin for WordPress is vulnerable to Limited File Deletion in all versions up to, and including, 1.55.0.2. This is due to the plugin accepting arbitrary upload field metadata from POST requests in draft submissions without proper validation, which is then used to delete files when a subsequent draft references the poisoned draft via the previous_draft_id parameter. This makes it possible for unauthenticated attackers to delete arbitrary non-PHP files within the wp-content/uploads/ directory. | |||||