Export limit exceeded: 373540 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 26), (line:1, col:27)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (373540 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-55047 1 Microsoft 19 365 Apps, Microsoft 365 Apps For Enterprise, Microsoft Office 365 For Mac and 16 more 2026-08-07 5.5 Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55141 1 Microsoft 15 365 Apps, Excel 2016, Microsoft 365 Apps For Enterprise and 12 more 2026-08-07 7.8 High
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55055 1 Microsoft 19 365 Apps, Microsoft 365 Apps For Enterprise, Microsoft Office 365 For Mac and 16 more 2026-08-07 7.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55132 1 Microsoft 19 365 Apps, Microsoft 365 Apps For Enterprise, Microsoft Office 365 For Mac and 16 more 2026-08-07 7.8 High
Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55043 1 Microsoft 14 365 Apps, Microsoft 365 Apps For Enterprise, Microsoft Office 365 For Mac and 11 more 2026-08-07 7.8 High
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-55949 1 Microsoft 16 365 Apps, Excel 2016, Excel 2019 and 13 more 2026-08-07 7.8 High
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-56184 1 Microsoft 13 Windows 10 21h2, Windows 10 21h2, Windows 10 22h2 and 10 more 2026-08-07 5.5 Medium
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-56192 1 Microsoft 19 365 Apps, Microsoft 365 Apps For Enterprise, Microsoft Office 365 For Mac and 16 more 2026-08-07 5.5 Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-54124 1 Microsoft 16 Terminal, Windows 10 21h2, Windows 10 21h2 and 13 more 2026-08-07 7.8 High
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally.
CVE-2026-57092 1 Microsoft 24 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 21 more 2026-08-07 9.9 Critical
Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network.
CVE-2026-55121 1 Microsoft 21 365 Apps, Microsoft 365 Apps For Enterprise, Microsoft Office 2016 and 18 more 2026-08-07 5.5 Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-47300 2 Microsoft, Redhat 6 .net, Microsoft Visual Studio 2022, Microsoft Visual Studio 2026 and 3 more 2026-08-07 8.8 High
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2026-47302 2 Microsoft, Redhat 7 .net, .net Framework, Microsoft Visual Studio 2022 and 4 more 2026-08-07 7.5 High
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-47303 2 Microsoft, Redhat 6 .net, Microsoft Visual Studio 2022, Microsoft Visual Studio 2026 and 3 more 2026-08-07 8.8 High
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2026-38708 1 Cudy 9 Tr1200, Tr3000, Wr1200 and 6 more 2026-08-07 9.8 Critical
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbitrary commands as root via a crafted input.
CVE-2026-38713 1 Cudy 9 Tr1200, Tr3000, Wr1200 and 6 more 2026-08-07 9.8 Critical
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the ipsec_conn interface. This vulnerability allows attackers to execute arbitrary commands as root via a crafted input.
CVE-2026-38711 1 Cudy 9 Tr1200, Tr3000, Wr1200 and 6 more 2026-08-07 9.8 Critical
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the system.upgrade_check interface. This vulnerability allows attackers to execute arbitrary commands as root via a crafted input.
CVE-2026-51775 1 Fastadmin 1 Fastadmin 2026-08-07 N/A
SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary code via the application/common/controller/Backend.php component
CVE-2026-52102 1 Openmediavault 1 Openmediavault 2026-08-07 N/A
An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to execute arbitrary commands as root via injecting shell metacharacters.
CVE-2026-52520 1 Emlog 1 Emlog 2026-08-07 5.4 Medium
Emlog CMS <= 2.6.14 contains a stored cross-site scripting (XSS) vulnerability in the article publishing module (/admin/article.php). A remote authenticated attacker can inject arbitrary JavaScript code via the article content. When an administrator reviews or previews the submitted article in the backend, the malicious script executes in the admin's browser session, allowing the attacker to perform administrative actions such as creating a backdoor administrator account.