Search

Expected end of text, found '–' (at char 42), (line:1, col:43)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (424974 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-125708 2026-11-12 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 10.0.4.
CVE-2026-125850 2026-11-12 8.8 High
Cross-Site Request Forgery (CSRF) vulnerability in webriti Appointment Dark appointment-dark allows Cross Site Request Forgery.This issue affects Appointment Dark: from n/a through 1.3.4.
CVE-2026-125848 2026-11-12 8.8 High
Cross-Site Request Forgery (CSRF) vulnerability in webriti Leo leo allows Cross Site Request Forgery.This issue affects Leo: from n/a through 1.7.4.
CVE-2026-125838 2026-11-12 8.8 High
Cross-Site Request Forgery (CSRF) vulnerability in webriti Quality quality allows Cross Site Request Forgery.This issue affects Quality: from n/a through 3.3.
CVE-2026-121355 1 Adobe 1 Adobe Connect 2026-11-12 9.1 Critical
Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated access to sensitive information or functionality. Exploitation of this issue does not require user interaction.
CVE-2026-121574 2 Wordpress-extensions, Wpchill 2 Passster, Passster 2026-11-12 5.3 Medium
Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20.
CVE-2026-121028 2 Wordpress-extensions, Wpchill 2 Strong Testimonials, Strong Testimonials 2026-11-12 5.3 Medium
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WP Chill Strong Testimonials strong-testimonials allows Code Injection.This issue affects Strong Testimonials: from n/a through 3.3.17.
CVE-2026-113408 2 Git, Git-scm 2 Git, Git 2026-11-12 3.3 Low
Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository
CVE-2026-69901 1 Microsoft 1 Teams 2026-11-12 7.5 High
Origin validation error in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-96985 1 Microsoft 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more 2026-11-12 4.9 Medium
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
CVE-2026-96984 1 Microsoft 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more 2026-11-12 4.9 Medium
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
CVE-2026-97006 1 Microsoft 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more 2026-11-12 4.9 Medium
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
CVE-2026-96980 1 Microsoft 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more 2026-11-12 4.9 Medium
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
CVE-2026-96975 1 Microsoft 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more 2026-11-12 5.9 Medium
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.
CVE-2026-96983 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-12 5.3 Medium
Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network.
CVE-2026-96969 1 Microsoft 9 Windows 10 21h2, Windows 10 22h2, Windows 11 23h2 and 6 more 2026-11-12 7 High
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-96971 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-12 7 High
Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
CVE-2026-97002 1 Microsoft 11 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 8 more 2026-11-12 7.5 High
Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally.
CVE-2026-96973 1 Microsoft 11 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 8 more 2026-11-12 7 High
Use after free in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96979 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-12 6.8 Medium
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.