Export limit exceeded: 417953 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 25867 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 417953 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found '/' (at char 44), (line:1, col:45)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (417953 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-110459 1 Ubiquiti 1 Unifi Protect Ai Key 2026-10-17 8.6 High
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.
CVE-2026-110465 1 Wisdomgarden 1 Tronclass 2026-10-17 4.3 Medium
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to alter the peer review scores of any student.
CVE-2026-110466 1 Wisdomgarden 1 Tronclass 2026-10-17 4.3 Medium
Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information.
CVE-2026-110467 1 Wisdomgarden 1 Tronclass 2026-10-17 4.3 Medium
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to view the peer review scores of any student.
CVE-2026-75345 1 Eipstackgroup 1 Opener 2026-10-17 7.5 High
OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path. This allows a remote attacker to cause a denial of service.
CVE-2026-88101 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-17 7.8 High
Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
CVE-2026-85916 1 Microsoft 12 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 9 more 2026-10-17 6.2 Medium
Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.
CVE-2026-75349 1 Eipstackgroup 1 Opener 2026-10-17 7.5 High
EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manager request parsing. This allows a remote attacker to cause a denial of service.
CVE-2026-75350 1 Eipstackgroup 1 Opener 2026-10-17 7.5 High
EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation for the EtherNet/IP Get_Attribute_List service. This allows a remote attacker to cause a denial of service
CVE-2026-21116 1 Samsung Mobile 1 Samsung Mobile Devices 2026-10-17 N/A
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21121 1 Samsung Mobile 1 Samsung Mobile Devices 2026-10-17 N/A
Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.
CVE-2026-110218 1 Webkul 1 Aureus Erp 2026-10-17 3.7 Low
Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read unpublished draft blog posts via the customer-facing post view page. Attackers who know or guess a post slug can retrieve the full title, content, image, tags, author and publish date because PostResource skips authorization and ViewPost ignores is_published.
CVE-2026-96301 1 Microsoft 17 Windows 10 21h2, Windows 10 21h2, Windows 10 22h2 and 14 more 2026-10-17 7 High
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-82918 1 Keyence Corporation 2 Xg-x Visionterminal, Xg Visionterminal 2026-10-17 5.5 Medium
XG VisionTerminal, XG-X VisionTerminal, LJ Series Terminal-Software and WI Series Terminal-Software provided by Keyence Corporation improperly restrict XML external entity references. If a user opens a specially crafted setting file, the sensitive information stored in the system where the affected product is installed may be disclosed.
CVE-2026-75347 1 Eipstackgroup 1 Opener 2026-10-17 7.5 High
EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic. This allows a remote attacker to cause a denial of service.
CVE-2026-78797 2026-10-17 9.8 Critical
An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary code via the task_id in tasks-lib.lua.
CVE-2026-78835 2026-10-17 9.8 Critical
Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Insufficiently Protected Credentials.
CVE-2026-21127 1 Samsung Mobile 1 Samsung Account 2026-10-17 N/A
Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.
CVE-2026-21134 1 Samsung Mobile 1 Samsung Flow 2026-10-17 N/A
Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.
CVE-2026-77532 1 Ubiquiti 1 Edgemax Edgeswitch 2026-10-17 8.8 High
A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device.