Search

Expected end of text, found 'ée' (at char 36), (line:1, col:37)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (377173 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-69105 1 Jfrog 1 Artifactory 2026-08-13 8.1 High
An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability.
CVE-2026-66878 1 Redhat 2 Acm, Advanced Cluster Management For Kubernetes 2026-08-13 7.7 High
A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable of creating Channel and Subscription resources, can exploit this vulnerability. By manipulating the Channel.Spec.SecretRef.Namespace field, the user can cause the system to copy sensitive Secret contents from other namespaces into their own, leading to information disclosure.
CVE-2026-66704 2026-08-13 7.2 High
Unauthenticated Server Side Request Forgery (SSRF) in Gutenverse Companion <= 2.5.1 versions.
CVE-2026-66698 2026-08-13 7.1 High
Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions.
CVE-2026-66658 2026-08-13 8.5 High
Subscriber SQL Injection in Reviewer <= 3.14.2 versions.
CVE-2026-66657 2026-08-13 8.1 High
Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions.
CVE-2026-66656 2026-08-13 8.1 High
Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions.
CVE-2026-66653 2026-08-13 8.1 High
Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions.
CVE-2026-66467 2026-08-13 6.5 Medium
Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions.
CVE-2026-66461 2026-08-13 7.5 High
Unauthenticated Broken Access Control in SMEPay: UPI Gateway for WooCommerce <= 1.0.5 versions.
CVE-2026-66460 2026-08-13 6.5 Medium
Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions.
CVE-2026-66458 2026-08-13 9.3 Critical
Unauthenticated SQL Injection in RealPress <= 1.1.2 versions.
CVE-2026-66453 2 Dimitri Grassi, Wordpress 2 Salon Booking System, Wordpress 2026-08-13 9.8 Critical
Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions.
CVE-2026-66450 2 Dylan Kuhn, Wordpress 2 Geo Mashup, Wordpress 2026-08-13 8.1 High
Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions.
CVE-2026-66449 2026-08-13 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions.
CVE-2026-66444 2026-08-13 6.5 Medium
Subscriber Sensitive Data Exposure in Payment Forms for Paystack <= 4.0.5 versions.
CVE-2026-66443 2 Pete Nelson, Wordpress 2 Rest Api Log, Wordpress 2026-08-13 7.5 High
Unauthenticated Sensitive Data Exposure in REST API Log <= 1.7.1 versions.
CVE-2026-66441 2 Multivendorx, Wordpress 2 Multivendorx, Wordpress 2026-08-13 7.5 High
Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions.
CVE-2026-66436 2 Realmag777, Wordpress 2 Active Products Tables For Woocommerce, Wordpress 2026-08-13 9.3 Critical
Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions.
CVE-2026-66432 2026-08-13 7.5 High
Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions.