Export limit exceeded: 407455 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 407455 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 407455 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 407455 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 407455 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 407455 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 407455 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 407455 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (1 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-14851 1 Copart 1 Copart S Online Billing Service 2026-10-14 N/A
A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII) and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised individuals. The issue is caused by a lack of authorisation checks at the endpoint responsible for serving PDF invoice files. Furthermore, some URLs for invoicing documents appear to be publicly accessible via search engines, exposing paths to confidential files. Successful exploitation of this vulnerability could allow an attacker to access data to which they should not have access, as well as to predict identifiers in order to access even more confidential information.