Export limit exceeded: 420840 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (615 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-77690 1 Zohocorp 1 Manageengine Key Manager Plus 2026-11-04 8.8 High
ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulnerable to a Command Injection vulnerability that allowed authenticated users with certificate deployment privileges to execute arbitrary commands through specially crafted input when configuring a deployment target.
CVE-2026-77779 1 Zohocorp 1 Manageengine Key Manager Plus 2026-11-04 7.7 High
ManageEngine Key Manager Plus versions before 7151 were vulnerable to an Improper Access Control vulnerability that allowed authenticated low-privilege users to export keys outside their authorized scope.
CVE-2026-77799 1 Zohocorp 1 Manageengine Key Manager Plus 2026-11-04 7.4 High
ManageEngine Key Manager Plus versions before 7150 are vulnerable to a Two-Factor Authentication bypass that allows attackers with valid credentials to log in without a verification code.
CVE-2026-77777 1 Zohocorp 1 Manageengine Key Manager Plus 2026-11-03 7.1 High
ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modify another user's ACME certificate deployment credentials.
CVE-2026-77800 1 Zohocorp 1 Manageengine Key Manager Plus 2026-11-03 7.7 High
ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows attackers to log in using SAML assertions meant for another service provider.
CVE-2026-16900 1 Zohocorp 3 Eventlog Analyzer, Log360, Manageengine Eventlog Analyzer 2026-11-03 7.5 High
Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing unauthenticated actor to register a local collector by sending a specially crafted registration request.
CVE-2026-13594 1 Zohocorp 3 Eventlog Analyzer, Log360, Manageengine Eventlog Analyzer 2026-11-03 9.1 Critical
Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.
CVE-2026-77778 1 Zohocorp 1 Manageengine Key Manager Plus 2026-11-03 7.1 High
ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to their own registered key vaults.
CVE-2026-77691 1 Zohocorp 1 Manageengine Key Manager Plus 2026-11-03 8.1 High
ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA
CVE-2026-8923 1 Zohocorp 2 Manageengine Eventlog Analyzer, Manageengine Log360 2026-11-02 8.7 High
Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated Remote Code Execution in Log Forward option.
CVE-2026-18199 1 Zohocorp 2 Manageengine Pam360, Manageengine Password Manager Pro 2026-11-02 8.8 High
Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability.
CVE-2026-14828 1 Zohocorp 3 Manageengine Access Manager Plus, Manageengine Pam360, Manageengine Password Manager Pro 2026-10-25 8.8 High
Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 are vulnerable to an authenticated SQL Injection vulnerability.
CVE-2026-18912 1 Zohocorp 1 Manageengine Datasecurity Plus 2026-10-25 7.7 High
ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an authenticated SQL injection vulnerability, allowing an authenticated technician to execute arbitrary SQL queries through the Reports module.
CVE-2026-14308 1 Zohocorp 1 Manageengine Malware Protection Plus 2026-10-13 4.9 Medium
Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService.
CVE-2026-12264 1 Zohocorp 1 Ddi Central 2026-09-28 8.8 High
Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution.
CVE-2026-12269 1 Zohocorp 1 Ddi Central 2026-09-28 8.8 High
Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI Central host.
CVE-2026-12268 1 Zohocorp 1 Ddi Central 2026-09-28 8.8 High
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution.
CVE-2026-12267 1 Zohocorp 1 Ddi Central 2026-09-28 7.2 High
ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution.
CVE-2026-12265 1 Zohocorp 1 Ddi Central 2026-09-28 8.8 High
Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations.
CVE-2026-12370 1 Zohocorp 3 Manageengine Netflow Analyzer, Manageengine Network Configuration Manager, Manageengine Opmanager 2026-09-24 7.6 High
ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution.