Search

Expected end of text, found ':' (at char 23), (line:1, col:24)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (393897 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-83101 1 Oracle 1 Forms 2026-09-17 8.1 High
Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful attacks of this vulnerability can result in takeover of Oracle Forms. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-83114 1 Oracle 1 Quality 2026-09-17 7.5 High
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality. Successful attacks of this vulnerability can result in takeover of Oracle Quality. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-83166 1 Oracle 1 Customer Interaction History 2026-09-17 7.7 High
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customer Interaction History. While the vulnerability is in Oracle Customer Interaction History, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Customer Interaction History accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
CVE-2026-92616 1 Error311 1 Filerise 2026-09-17 6.8 Medium
FileRise before version 3.28.0 contains a privilege escalation vulnerability that allows authenticated low-privilege attackers to gain unauthorized read and write access by exploiting improper session isolation between the WebDAV interface and the web application session context. Attackers can combine valid Basic-Auth credentials with an active admin PHPSESSID cookie to bypass authorization boundaries, as the WebDAV layer incorrectly inherits elevated privileges from an ambient web session rather than enforcing independent stateless authentication per RFC 4918.
CVE-2026-25294 2026-09-17 7.4 High
Transient DOS while parsing frame during channel usage.
CVE-2026-25290 2026-09-17 7.8 High
Memory Corruption when validating large data buffers from external sources using addition to check buffer length.
CVE-2026-25284 2026-09-17 7.3 High
Information Disclosure when a pointer is reused after being deallocated.
CVE-2026-25283 2026-09-17 8.8 High
Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size.
CVE-2026-25282 2026-09-17 7.9 High
Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.
CVE-2026-25281 2026-09-17 7.4 High
Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.
CVE-2026-25280 2026-09-17 7.8 High
Memory corruption when processing escape handling flow with insufficient user buffer sizes.
CVE-2026-25278 2026-09-17 7.8 High
Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.
CVE-2026-25275 2026-09-17 7.5 High
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
CVE-2026-25261 2026-09-17 6.7 Medium
Memory corruption while processing rear sensor IOCTL calls.
CVE-2026-24081 2026-09-17 7.4 High
Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.
CVE-2026-24075 2026-09-17 7.8 High
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
CVE-2026-24074 2026-09-17 7.8 High
Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.
CVE-2026-24073 2026-09-17 7.8 High
Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.
CVE-2025-59607 2026-09-17 7.8 High
Memory Corruption when copying large input data exceeds normal allocation limits.
CVE-2026-50604 2026-09-17 N/A
A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The socket handshake process does not properly require authentication before granting access to the service. Under certain circumstances, an unauthorized connection may be established, potentially allowing access to functionality that should be restricted.