Search

Expected end of text, found ',' (at char 15), (line:1, col:16)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (415487 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-118020 1 Mozilla 1 Firefox 2026-10-27 N/A
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118019 1 Mozilla 1 Firefox 2026-10-27 N/A
Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118017 1 Mozilla 1 Firefox 2026-10-27 N/A
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118016 1 Mozilla 1 Firefox 2026-10-27 N/A
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118015 1 Mozilla 1 Firefox 2026-10-27 N/A
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118014 1 Mozilla 1 Firefox 2026-10-27 N/A
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118013 1 Mozilla 1 Firefox 2026-10-27 N/A
Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-18330 1 Tp-link 1 Archer Ax55 V4 2026-10-27 N/A
A hard-coded cryptographic key vulnerability exists in TP-Link RE305 V3 and Archer C7 V5. The same RSA-1024 private key is stored within firmware configuration files and reused across devices. An attacker who obtains the private key and captures an HTTP Web UI login session may use the key to decrypt the administrator password.  Successful exploitation may disclose the administrator password captured from an HTTP login session and compromise session confidentiality.
CVE-2026-118012 1 Mozilla 1 Firefox 2026-10-27 N/A
Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118011 1 Mozilla 1 Firefox 2026-10-27 N/A
Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118010 1 Mozilla 1 Firefox 2026-10-27 N/A
Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118009 1 Mozilla 1 Firefox 2026-10-27 N/A
Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118008 1 Mozilla 1 Firefox 2026-10-27 8.8 High
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118007 1 Mozilla 1 Firefox 2026-10-27 N/A
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118006 1 Mozilla 1 Firefox 2026-10-27 N/A
Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118005 1 Mozilla 1 Firefox 2026-10-27 N/A
Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-98141 1 Linux 1 Linux Kernel 2026-10-27 5.5 Medium
In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure update_reparse_data() ignores the return value of set_reparse_index(). When index insertion fails, the code removes the just-written reparse data as cleanup but still returns 0, so symlink(2) (and WSL special file creation) reports success while no reparse data exists on disk. When there was no previous reparse data (oldsize == 0), the failure was likewise silently ignored. Propagate the error to the caller.
CVE-2026-106077 2026-10-27 N/A
A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges.
CVE-2026-108142 1 Veeam 1 Backup And Replication 2026-10-27 N/A
A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
CVE-2026-116863 2 Tribulant, Wordpress-extensions 2 Newsletters, Newsletters 2026-10-27 9.6 Critical
Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Request Forgery.This issue affects Newsletters: from n/a through 4.18.2.