Export limit exceeded: 107437 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (107437 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-116869 2026-10-29 7.2 High
Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions.
CVE-2026-116868 2026-10-29 8.8 High
Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions.
CVE-2026-116867 2026-10-29 8.8 High
Contributor PHP Object Injection in Dynamic QR Code &#8211; generator <= 1.0.1 versions.
CVE-2026-116866 2026-10-29 8.8 High
Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions.
CVE-2026-116865 2026-10-29 7.2 High
Editor PHP Object Injection in Zippy <= 1.7.0 versions.
CVE-2026-116864 2026-10-29 7.2 High
Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions.
CVE-2026-108494 2026-10-29 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Chained Quiz <= 1.4.1 versions.
CVE-2026-61996 2026-10-29 8.5 High
Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions.
CVE-2026-61995 2026-10-29 7.1 High
Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions.
CVE-2026-61993 2026-10-29 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions.
CVE-2026-61989 2026-10-29 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings <= 3.5.25 versions.
CVE-2026-61988 2026-10-29 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Auction Nudge – Your eBay on Your Site <= 8.4.0 versions.
CVE-2026-54866 2026-10-29 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor Plugin <= 1.2.8 versions.
CVE-2026-54864 2026-10-29 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1.165 versions.
CVE-2026-42701 2026-10-29 7.2 High
Shop manager PHP Object Injection in YayMail <= 4.4.6 versions.
CVE-2026-42692 2026-10-29 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 versions.
CVE-2026-27394 2026-10-29 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Eventer <= 0.1.1 versions.
CVE-2026-118085 2026-10-29 7.1 High
Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions.
CVE-2026-88077 1 Microsoft 1 Edge Chromium 2026-10-29 8.8 High
Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-96196 1 Microsoft 1 Edge Chromium 2026-10-29 8.8 High
Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.