Export limit exceeded: 409975 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 409975 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 409975 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 409975 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 31), (line:1, col:32)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (409975 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-82895 1 Ibm 1 Guardium Data Protection 2026-10-14 8.1 High
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
CVE-2026-77427 2026-10-14 5.9 Medium
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. From 3.9.0 until 3.22.0, pristine manual FileRise installations without PERSISTENT_TOKENS_KEY or metadata/persistent_tokens.key can activate a published legacy compatibility key. If an attacker separately obtains ciphertext-bearing account or configuration files, the known fallback key can enable decryption of TOTP secrets or credentials. Docker installations already generated a unique persistent key, and existing installations are not automatically rotated because doing so could make encrypted state unreadable. This issue is fixed in version 3.22.0.
CVE-2026-109729 1 Mozilla 2 Firefox, Thunderbird 2026-10-14 5.4 Medium
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-84035 1 Ibm 1 Guardium Data Protection 2026-10-14 8.1 High
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
CVE-2026-84058 1 Ibm 1 Guardium Data Protection 2026-10-14 8.1 High
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.
CVE-2026-97760 1 Microsoft 8 365 Apps, Microsoft 365, Office 2021 and 5 more 2026-10-14 6.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97844 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97843 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97839 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97838 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97836 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97835 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97833 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97831 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97829 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97828 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97763 1 Microsoft 8 365 Apps, Microsoft 365, Office 2021 and 5 more 2026-10-14 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97823 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-9268 1 Gitlab 1 Gitlab 2026-10-14 2.7 Low
GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with limited permissions to modify project CI/CD deployment rollback settings without proper authorization, due to insufficient access control checks.
CVE-2026-92883 1 Gitlab 1 Gitlab 2026-10-14 8.7 High
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users' browser sessions via a specially crafted repository, due to improper sanitization of HTML attributes in syntax-highlighted output.