Export limit exceeded: 416034 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 27), (line:1, col:28)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (416034 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-103330 2026-10-28 5.3 Medium
The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment notifications, as the verification is keyed on a merchant secret that is empty by default and the rest of the signed data is attacker-controlled, allowing unauthenticated attackers to forge a valid confirmation and mark orders as paid without payment.
CVE-2026-103313 2026-10-28 5.3 Medium
The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the payment provider's transaction confirmation to the order it completes, nor verify the confirmed amount, allowing an unauthenticated attacker who holds a single genuine low-value transaction to mark arbitrary higher-value orders as paid.
CVE-2026-117858 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117857 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117856 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117855 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117854 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117853 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117852 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117851 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117850 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117849 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117848 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117847 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117846 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117845 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117844 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117843 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117842 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117841 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.