Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (25099 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-39254 1 Steelseries 1 Gg 2026-08-18 9.8 Critical
Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, CxAudioHidDevice::DeviceGetDescriptionString components
CVE-2026-65349 1 Apple 4 Ios And Ipados, Ipados, Iphone Os and 1 more 2026-08-18 6.6 Medium
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory.
CVE-2026-75897 2 Aws, Opensearch 2 Amazon Opensearch Service, Opensearch Dashboards 2026-08-18 7.5 High
Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request.
CVE-2026-66679 2 Codepeople, Wordpress 2 Appointment Hour Booking, Wordpress 2026-08-18 6.5 Medium
Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions.
CVE-2026-65338 1 Apple 5 Ios And Ipados, Ipados, Iphone Os and 2 more 2026-08-18 4.3 Medium
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65335 1 Apple 4 Ios And Ipados, Ipados, Iphone Os and 1 more 2026-08-18 4.3 Medium
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65341 1 Apple 5 Ios And Ipados, Ipados, Iphone Os and 2 more 2026-08-18 5.4 Medium
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.
CVE-2026-64784 1 Apple 5 Ios And Ipados, Ipados, Iphone Os and 2 more 2026-08-18 4.3 Medium
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65336 1 Apple 4 Ios And Ipados, Ipados, Iphone Os and 1 more 2026-08-18 4.3 Medium
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65337 1 Apple 5 Ios And Ipados, Ipados, Iphone Os and 2 more 2026-08-18 4.3 Medium
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65340 1 Apple 5 Ios And Ipados, Ipados, Iphone Os and 2 more 2026-08-18 4.3 Medium
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-43795 1 Apple 5 Ios And Ipados, Ipados, Iphone Os and 2 more 2026-08-18 4.3 Medium
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65331 1 Apple 5 Ios And Ipados, Ipados, Iphone Os and 2 more 2026-08-18 4.3 Medium
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65333 1 Apple 4 Ios And Ipados, Ipados, Iphone Os and 1 more 2026-08-18 4.3 Medium
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-63632 1 Onnx 1 Onnx 2026-08-18 3.3 Low
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.version_converter.convert_version() can perform an out-of-bounds read in Gemm_7_6::adapt_gemm_7_6() in onnx/version_converter/adapters/gemm_7_6.h when a Gemm node has input tensors with fewer than two dimensions because B_shape[1], A_shape[0], or A_shape[1] is accessed without a rank check, potentially causing a process crash during an opset 7 to 6 downgrade. This issue is fixed in version 1.22.0.
CVE-2026-39255 1 Steelseries 1 Gg 2026-08-18 9.8 Critical
Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, dup_wcs components
CVE-2026-17572 1 Hdfgroup 1 Hdf5 2026-08-18 5.5 Medium
Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service (crash) via a crafted HDF5 file whose shared-message list index declares a num_messages count exceeding list_max, triggering out-of-bounds heap reads and writes in H5SM__cache_list_deserialize and H5SM__cache_list_verify_chksum.
CVE-2026-13361 1 Ibm 1 Informix Dynamic Server 2026-08-18 8.8 High
IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.
CVE-2025-12011 2 Rockwell Automation, Rockwellautomation 5 Compactlogix 5370 Compact Guardlogix 5370 Controllogix 5570 Guardlogix 5570, Compact Guardlogix 5370, Compactlogix 5370 and 2 more 2026-08-18 N/A
A denial-of-service issue exists in  5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major non-recoverable fault (MNRF).
CVE-2026-2092 1 Redhat 2 Build Keycloak, Build Of Keycloak 2026-08-18 7.7 High
A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language (SAML) broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. This allows the attacker to inject an encrypted assertion for an arbitrary principal, leading to unauthorized access and potential information disclosure.