CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 08:02 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-48015 New | JE JeeWMS erzhongxmu | 7.5 | Oct 22 | JeeWMS Path Traversal via showOrDownByurl.do |
| CVE-2021-48014 New | FI FineReport FanRuan | 9.8 | Oct 22 | FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServer |
| CVE-2021-48013 New | EC E-cology Weaver Network Co., Ltd. | 7.5 | Oct 22 | Weaver E-cology 8.0 Unauthenticated Path Traversal via ln.FileDownload |
| CVE-2020-37284 New | SI Sickbeard midgetspy | 6.1 | Oct 22 | Sickbeard build-507 Reflected XSS via testNaming pattern Parameter |
| CVE-2019-25779 New | DI Diarise WooThemes | 7.5 | Oct 22 | WooThemes Diarise 1.5.9 Local File Disclosure via download.php |
| CVE-2019-25778 New | SE SeaCMS SeaCMS | 8.2 | Oct 22 | SeaCMS 8.7 SQL Injection via comment/api/index.php rlist Parameter |
| CVE-2018-25439 New | ME MetInfo MetInfo | 7.5 | Oct 22 | MetInfo CMS < 6.1.1 Unauthenticated Path Traversal via thumb.php dir Parameter |
| CVE-2018-25438 New | GR Group-Office Intermesh | 7.5 | Oct 22 | Intermesh Group-Office < 3.5.5 Path Traversal via compress.php |
| CVE-2017-20290 New | DI Discourse Discourse | 6.1 | Oct 22 | Discourse < 1.9.0.beta13 Reflected XSS via /email/unsubscribed |
| CVE-2017-20289 New | AW Ad Widget Broadstreet | 7.5 | Oct 22 | Broadstreet Ad Widget WordPress Plugin < 2.12.0 Local File Inclusion via step parameter |
| CVE-2017-20288 New | QC QCubed QCubed | 6.1 | Oct 22 | QCubed 3.1.1 Reflected XSS via installer step_2.php |
| CVE-2017-20287 New | JS Javo Spot Javo Themes | 7.5 | Oct 22 | Javo Spot WordPress Theme < 3.0.0 Path Traversal via admin-ajax.php fn Parameter |
| CVE-2026-13411 New | MA Mattermost Mattermost | 4.3 | Oct 22 | Null condition in Playbooks import crashes the plugin |
| CVE-2026-111079 New | RH Red Hat Enterprise Linux 10 Red Hat | 7.4 | Oct 22 | Goose: goose: shell history and environment leak via terminal integration |
| CVE-2026-115207 New | RH Red Hat Enterprise Linux 10 Red Hat | 5.5 | Oct 22 | Patch: filename validation bypass in reversal fallback allows file creation outside the working directory |
| CVE-2026-112313 New | AE ACF Extended ACF Extended | 7.1 | Oct 22 | WordPress ACF Extended plugin <= 0.9.2.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-112820 New | AC Academist Core Elated-Themes | 8.1 | Oct 22 | WordPress Academist Core plugin <= 1.4.1 - Local File Inclusion vulnerability |
| CVE-2026-114348 New | WE webpack-dev-server webpack-dev-server | 5.3 | Oct 22 | webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpoint |
| CVE-2026-112085 New | WE webpack-dev-server webpack-dev-server | 8.2 | Oct 22 | webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades |
| CVE-2026-106017 New | O3 OpenVPN 3 Core Library OpenVPN | 6.3 | Oct 22 | Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions |
| CVE-2026-21812 New | AI AppScan Integration with Azure Boards for ASoC & A360 HCL Software | 2.2 | Oct 22 | Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149) |
| CVE-2026-21811 New | AI AppScan Integration with Azure Boards for ASoC & A360 HCL Software | 3.8 | Oct 22 | Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149) |
| CVE-2026-114703 New | EF Extensions for Leaflet Map hupe13 | 6.5 | Oct 22 | WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-114702 New | NS ND Shortcodes For Visual Composer nicdark | 6.5 | Oct 22 | WordPress ND Shortcodes For Visual Composer plugin <= 7.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-114701 New | WW Waitlist Woocommerce ( Back in stock notifier ) xootix | 6.5 | Oct 22 | WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-114700 New | RM Restaurant Menu – Food Ordering System – Table Reservation Gloriafood | 6.5 | Oct 22 | WordPress Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-114699 New | ЮД ЮKassa для WooCommerce yoomoney | 5.3 | Oct 22 | WordPress ЮKassa для WooCommerce plugin <= 2.17.3 - Broken Access Control vulnerability |
| CVE-2026-110974 New | AN android-json vaadin | 6.3 | Oct 22 | Uncontrolled Recursion on Nested JSON Allows Denial of Service in android-json |
| CVE-2026-114195 New | SH ShopMagic WP Desk | 5.3 | Oct 22 | WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerability |
| CVE-2026-112218 New | MS Majestic Support Ahmad | 5.3 | Oct 22 | WordPress Majestic Support plugin <= 1.2.1 - Broken Access Control vulnerability |
| CVE-2026-114696 New | PR Page Restriction WordPress (WP) miniOrange | 5.3 | Oct 22 | WordPress Page Restriction WordPress (WP) plugin <= 1.6.0 - Broken Access Control vulnerability |
| CVE-2026-111842 New | SP Sunshine Photo Cart WP Sunshine | 5.3 | Oct 22 | WordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerability |
| CVE-2026-115253 New | WA WatchGuard Agent WatchGuard | 7.3 | Oct 22 | WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering |
| CVE-2026-96293 New | WA WatchGuard Agent WatchGuard | 6.9 | Oct 22 | Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File |