Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (3857 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-62015 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.
CVE-2026-62014 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.
CVE-2026-62013 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions.
CVE-2026-62011 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.
CVE-2026-62010 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.
CVE-2026-62009 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions.
CVE-2026-62008 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions.
CVE-2026-62005 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.
CVE-2026-62004 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.
CVE-2026-62003 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in Mission <= 1.22 versions.
CVE-2026-62002 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions.
CVE-2026-61998 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.
CVE-2026-61997 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.
CVE-2026-61992 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions.
CVE-2026-54860 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.
CVE-2026-54859 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.
CVE-2026-54857 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.
CVE-2026-54856 2026-10-29 9.8 Critical
Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.
CVE-2026-42701 2026-10-29 7.2 High
Shop manager PHP Object Injection in YayMail <= 4.4.6 versions.
CVE-2026-116230 2 Ndemic Creations, Ndemiccreations 2 Plague Inc Evolved, Plague Inc Evolved 2026-10-29 6.3 Medium
A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected element is an unknown function of the component Workshop Scenario Loader. Such manipulation leads to deserialization. The attack may be performed from remote. Upgrading to version 1.24.0.4 is sufficient to fix this issue. It is recommended to upgrade the affected component.