377,174 CVE lengkap 1999–2026

CVE Notifier

Arsip lengkap dari cve.org (CVE Record), skor CVSS dari NVD, dan daftar eksploitasi aktif dari CISA KEV. Ter-update tiap 30 menit.

Lihat feed Sumber data

arsip 377,174 CVE • 12,754 critical • 1,713 KEV

  • 1999–2026
  • 395.000+ CVE
  • cve.org
  • NVD CVSS
  • CISA KEV
  • Auto-update 30m
  • SQLite full-text

Feed Kerentanan

Semua Critical (≥9) High (7-9) KEV WordPress

Menampilkan 12 dari 377,174 entri — halaman 385/31432

CVE-2026-82771 CWE-79 5.4

CVE-2026-82771

Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

cve.org Contec · Co., · Ltd.:ECE1000 14 Sep 2026
CVE-2026-82770 CWE-120 8.8

CVE-2026-82770

Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed.

cve.org Contec · Co., · Ltd.:RP-WAH-SR1 14 Sep 2026
CVE-2026-82768 CWE-23 8.1

CVE-2026-82768

Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.

cve.org Contec · Co., · Ltd.:SGA1000 14 Sep 2026
CVE-2026-82769 CWE-79 5.4

CVE-2026-82769

Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

cve.org Contec · Co., · Ltd.:RP-WAH-SR1 14 Sep 2026
CVE-2026-82767 CWE-79 5.2

CVE-2026-82767

Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

cve.org Contec · Co., · Ltd.:SGA1000 14 Sep 2026
CVE-2026-82766 CWE-78 8.8

CVE-2026-82766

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log i…

cve.org Contec · Co., · Ltd.:SGA1000 14 Sep 2026
CVE-2026-82764 CWE-352 4.3

CVE-2026-82764

Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.

cve.org Contec · Co., · Ltd.:FXA5000 14 Sep 2026
CVE-2026-82762 CWE-78 8.8

CVE-2026-82762

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS comma…

cve.org Contec · Co., · Ltd.:FXA5000 14 Sep 2026
CVE-2026-68955 CWE-427 7.8

CVE-2026-68955

The installer for Rakuten Kobo Desktop Application (Windows version) insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be ex…

cve.org Rakuten · Kobo · Inc.:The 14 Sep 2026
CVE-2026-90690 CWE-78 7.3

0x4m4 HexStrike AI API Tools Endpoint hexstrike_server.py subprocess.Popen os command injection

A weakness has been identified in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The affected element is the function subprocess.Popen of the file hexstrike_server.py of the component API Tools Endpoi…

cve.org 0x4m4:HexStrike · AI 14 Sep 2026
CVE-2026-85196 CWE-79 N/A

Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla < 2.1.0

Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla < 2.1.0 - Articles Anywhere Pro and Users Anywhere Pro return values from request…

cve.org regularlabs.com:Articles · Anywhere · (Pro) 14 Sep 2026
CVE-2026-88852 CWE-79 N/A

Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla < 7.0.0, Snippets Pro extension for Joomla < 11.0.0

Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla < 7.0.0, Snippets Pro extension for Joomla < 11.0.0 - Snippets substitutes variable values supplied by an ar…

cve.org regularlabs.com:Snippets · (Free) · extension 14 Sep 2026

Statistik

Arsip lengkap kerentanan dari semua sumber — live dari database.

cache/cve.db • 01 Oct 2026 08:56
377,174 Total CVE terindeks
▲ 1999–2026
60,905 Tahun 2026
12,754 Critical (skor ≥ 9)
1,713 CISA KEV aktif

Distribusi Severity

CVSS v3
12,754 critical
  • Critical 12,754 (8%)
  • High 61,345 (41%)
  • Medium 68,090 (45%)
  • Low 8,634 (6%)
150,872 dinilai • 226,302 belum

Tren CVE per Tahun

1999–2026
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026

cve.org

Arsip penuh CVE dari CVE Program — id, deskripsi, CWE, referensi.

245,461 CVE Record

NVD

Kerentanan dengan skor CVSS v3.x dari NIST National Vulnerability Database.

150,872 CVSS dinilai

Wordfence

Kerentanan plugin/theme WordPress dari Wordfence Intelligence.

11,134 WordPress

WPScan

Kerentanan ekosistem WordPress dari WPScan (Patchstack).

5,444 WordPress

GitHub

CVE yang menyentuh ekosistem GitHub (judul/deskripsi/produk).

3,208 Ekosistem

MITRE

CNA asli yang menerbitkan dan mengelola CVE Record.

114,963 CNA Publish

Sumber Data

cve.org

Arsip CVE Program — id, deskripsi, CWE, referensi. Update tiap 30 menit via delta release.

NVD

Skor CVSS v3.1 untuk entri yang dinilai NIST NVD.

CISA KEV

Kerentanan yang aktif dieksploitasi — prioritas tinggi.

WPScan

Kerentanan ekosistem WordPress.

Wordfence

Kerentanan plugin/theme WordPress.

GitHub

Security Advisories ekosistem open source.