Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium4.3Missing Authorization vulnerability in bPlugins Tiktok Feed allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2026-24520 · CVE.org · NIST NVDMay 26, 2026
High7.8NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources.CVE-2026-24190 · nvidia · gpu display driver · CVE.org · NIST NVD · Linux, MicrosoftMay 26, 2026
Medium4.3Bugsink is a self-hosted error tracking tool.CVE-2026-47728 · CVE.org · NIST NVDMay 26, 2026
Medium4.3Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2026-24638 · CVE.org · NIST NVDMay 26, 2026
Medium5.3Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2026-24590 · CVE.org · NIST NVDMay 26, 2026
Medium5.3Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2026-39655 · CVE.org · NIST NVDMay 26, 2026
Medium6.5A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2)C0, GS1200-8v3 firmware versions through 1.00(ACPT.2)C0, GS1200-5HPv3 f…CVE-2026-4795 · CVE.org · NIST NVD · ZyxelMay 26, 2026
High7.5Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2026-45438 · CVE.org · NIST NVD · WordPressMay 25, 2026
High7.5Missing Authorization vulnerability in edward_plainview MyCryptoCheckout allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2026-45209 · CVE.org · NIST NVDMay 25, 2026
Medium6.3Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2026-42776 · CVE.org · NIST NVDMay 25, 2026
Medium6.5Missing Authorization vulnerability in SePay team SePay Gateway allows Retrieve Embedded Sensitive Data.CVE-2026-42763 · CVE.org · NIST NVDMay 25, 2026
Medium5.4Missing Authorization vulnerability in Linethemes NanoCare allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2026-32389 · CVE.org · NIST NVDMay 25, 2026
Medium5.3Missing Authorization vulnerability in WP Chill RSVP and Event Management allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2026-27398 · CVE.org · NIST NVDMay 25, 2026
Medium5.3Missing Authorization vulnerability in Cornel Raiu WP Search Analytics allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2026-27357 · CVE.org · NIST NVDMay 25, 2026
Medium4.9Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2026-27346 · CVE.org · NIST NVDMay 25, 2026
Medium5.3Missing Authorization vulnerability in Lucian Apostol Auto Affiliate Links allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2026-24592 · CVE.org · NIST NVDMay 25, 2026
Medium5.4Missing Authorization vulnerability in Themeansar Newses allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2026-24586 · CVE.org · NIST NVDMay 25, 2026
Medium4.3Missing Authorization vulnerability in WPPOOL FlexTable allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2026-24582 · CVE.org · NIST NVDMay 25, 2026
Medium4.3Missing Authorization vulnerability in Patterns in the cloud Autoship Cloud for WooCommerce Subscription Products allows Exploiting Incorrectly Configured Access Contr…CVE-2026-24527 · CVE.org · NIST NVD · WordPressMay 25, 2026
Medium4.3Missing Authorization vulnerability in Nikki Blight QR Redirector allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2026-24545 · CVE.org · NIST NVDMay 25, 2026
Low2.1A security flaw has been discovered in SourceCodester Student Grades Management System 1.0.CVE-2026-9486 · CVE.org · NIST NVDMay 25, 2026
Medium5.3Missing Authorization vulnerability in Ruben Garcia GamiPress allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2026-24546 · CVE.org · NIST NVDMay 25, 2026
Critical9.0A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the mode is enabled.CVE-2026-2651 · lfprojects · mlflow · CVE.org · NIST NVDMay 25, 2026
Medium5.5A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16.CVE-2026-9350 · CVE.org · NIST NVDMay 24, 2026
Low2.1A vulnerability was identified in calcom cal.diy up to 4.9.4.CVE-2026-9303 · CVE.org · NIST NVDMay 23, 2026