CVE.report
CVE.report is the most up-to-date database of common vulnerabilities and exposures. Information is pulled in from several sources and processed in to a mobile friendly, easy to use page. Use the site to quickly check for vulnerabilities in products such as operating systems, applications, hardware, networks, databases, browsers, e-mail clients and more.
CVEs provide a unique and common naming scheme for publicly known cyber security vulnerabilities in order to quickly identify and share these vulnerabilities. You can use the search below to look for vulnerabilities based on product, vendor, or common tags
The form you will see after following this link allows you to fill out the various variables in the CVSS scoring system and receive the corresponding score. The description of each of the variables is also included for additional information.
cve.report now provides a free read-only JSON API for CVE details. Each record combines the CVE Program JSON record, NVD enrichment, KEV, and EPSS when available.
Recent CVEs
| CVE | Description | Updated |
|---|---|---|
| CVE-2026-114429 json | The WPVR WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour hotspot content before storing... | |
| CVE-2026-113674 json | The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by logged-out use... | |
| CVE-2026-113673 json | The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into ... | |
| CVE-2026-113493 json | The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map shortcode attributes before ou... | |
| CVE-2026-113492 json | The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading listings... | |
| CVE-2026-113491 json | The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local file... | |
| CVE-2026-113490 json | The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check when rendering a listing's m... | |
| CVE-2026-113489 json | The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing being s... | |
| CVE-2026-112207 json | The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link belongs to the site before ... | |
| CVE-2026-110956 json | The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a genuine second factor before authentic... | |
| CVE-2026-107907 json | The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check when handling its front-end ... | |
| CVE-2026-97353 json | The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or ownership checks before updat... | |
| CVE-2026-97352 json | The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX action... | |
| CVE-2026-87835 json | The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may set when registe... | |
| CVE-2026-107887 json | The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action tha... | |
| CVE-2026-105199 json | The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.3 does not perform a capability check in one of its AJAX a... | |
| CVE-2026-115807 json | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vuln... | |
| CVE-2026-115806 json | The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, an... | |
| CVE-2026-115785 json | An SMTP command injection vulnerability in the data-source testing functionality of Zimbra Collaboration Suite (ZCS) allows a... | |
| CVE-2026-108456 json | Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network. | |
| CVE-2026-105014 json | Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized... | |
| CVE-2026-96185 json | Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network. | |
| CVE-2026-95714 json | A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high pri... | |
| CVE-2026-95711 json | An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacen... | |
| CVE-2026-95709 json | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker... | |
| CVE-2026-95708 json | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker... | |
| CVE-2026-95707 json | A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileg... | |
| CVE-2026-95706 json | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high p... | |
| CVE-2026-93640 json | A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite (ZCS) allows the Un... | |
| CVE-2026-93489 json | Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an acc... | |
| CVE-2026-91093 json | A potential security vulnerability has been identified in HP One Agent for certain HP PC products, which might allow for esca... | |
| CVE-2026-75779 json | Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery... | |
| CVE-2026-75775 json | Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbit... | |
| CVE-2026-50057 json | A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZCS) MTA package allows the Unix zimbra account... | |
| CVE-2026-50056 json | A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra Collaboration Suite (ZCS) allows the Unix ... | |
| CVE-2026-111497 json | A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all p... | |
| CVE-2026-95705 json | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high p... | |
| CVE-2026-95704 json | A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated rem... | |
| CVE-2026-91504 json | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite). Support... | |
| CVE-2026-91503 json | Vulnerability in the VPD component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.2... | |
| CVE-2026-91502 json | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that a... | |
| CVE-2026-91501 json | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer). Supported versions ... | |
| CVE-2026-91499 json | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Eas... | |
| CVE-2026-91496 json | Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versio... | |
| CVE-2026-91494 json | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Suppor... | |
| CVE-2026-91493 json | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Suppor... | |
| CVE-2026-91492 json | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+). Supported ... | |
| CVE-2026-79956 json | A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execut... | |
| CVE-2026-79892 json | A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code.... | |
| CVE-2026-79891 json | A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote atta... | |
| CVE-2026-79890 json | There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending spec... | |
| CVE-2026-79889 json | Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigge... | |
| CVE-2026-79888 json | A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigge... | |
| CVE-2026-79887 json | A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution... | |
| CVE-2026-79858 json | An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an u... | |
| CVE-2026-79857 json | There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that coul... | |
| CVE-2026-79856 json | A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to c... | |
| CVE-2026-79855 json | An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent exi... | |
| CVE-2026-79854 json | A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection a... | |
| CVE-2026-79852 json | A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL in... | |
| CVE-2026-91489 json | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Suppor... | |
| CVE-2026-91488 json | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). Suppor... | |
| CVE-2026-91487 json | Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-perf, ... | |
| CVE-2026-91486 json | Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil product of Oracle PeopleSoft (component: General Ledger)... | |
| CVE-2026-91485 json | Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). T... | |
| CVE-2026-91484 json | Vulnerability in Oracle Java SE (component: Java plugin). Supported versions that are affected are Oracle Java SE: 8u503 and... | |
| CVE-2026-91483 json | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The sup... | |
| CVE-2026-91482 json | Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Bidder Registratio... | |
| CVE-2026-91481 json | Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Registration). ... | |
| CVE-2026-91480 json | Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing... | |
| CVE-2026-91479 json | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Eas... | |
| CVE-2026-91477 json | Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX). Supported versions that are affected are O... | |
| CVE-2026-91476 json | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). ... | |
| CVE-2026-91475 json | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SD... | |
| CVE-2026-91474 json | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). ... | |
| CVE-2026-91473 json | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported versio... | |
| CVE-2026-91471 json | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: BAM Framewo... | |
| CVE-2026-91467 json | Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported ... | |
| CVE-2026-91466 json | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Asset Manage... | |
| CVE-2026-91465 json | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration)... | |
| CVE-2026-91464 json | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (com... | |
| CVE-2026-91463 json | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (com... | |
| CVE-2026-91462 json | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (com... | |
| CVE-2026-91461 json | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (com... | |
| CVE-2026-91460 json | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK... | |
| CVE-2026-110447 json | Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as ... | |
| CVE-2026-101854 json | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versi... | |
| CVE-2026-101853 json | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versi... | |
| CVE-2026-101852 json | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versi... | |
| CVE-2026-101813 json | Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported version... | |
| CVE-2026-101809 json | Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versio... | |
| CVE-2026-101736 json | Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core). Supported versions ... | |
| CVE-2026-101692 json | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported version... | |
| CVE-2026-101686 json | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provid... | |
| CVE-2026-101685 json | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provid... | |
| CVE-2026-101664 json | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Suppor... | |
| CVE-2026-101656 json | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Suppor... | |
| CVE-2026-101655 json | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Suppor... | |
| CVE-2026-101654 json | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Suppor... | |
| CVE-2026-101653 json | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Suppor... |