Export limit exceeded: 17874 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (17874 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-94590 2026-10-11 6.5 Medium
Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affects Sell Downloads: from n/a through 1.2.3.
CVE-2026-62098 2026-10-11 6.5 Medium
Unauthenticated Content Injection in Boutique <= 2.3.3 versions.
CVE-2026-39802 2026-10-11 8.1 High
Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.
CVE-2026-103071 2026-10-11 7.5 High
Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection.This issue affects Thank You Page Customizer for WooCommerce: from n/a through 1.2.3.
CVE-2026-101022 1 Grid Protection Alliance 2 Openhistorian, Openpdc 2026-10-11 4.3 Medium
A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be targeted. An authenticated user can attempt connections to arbitrary internal network destinations, revealing which destinations are reachable. With repeated attempts, an attacker may be able to map the internal network.
CVE-2026-66566 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.
CVE-2026-62115 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.
CVE-2026-62099 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.
CVE-2026-62096 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.
CVE-2026-62094 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.
CVE-2026-62092 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.
CVE-2026-62075 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.
CVE-2026-62074 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.
CVE-2026-62070 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.
CVE-2026-62069 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.
CVE-2026-62068 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.
CVE-2026-62067 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Kaven <= 1.2 versions.
CVE-2026-62066 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Volos <= 1.2 versions.
CVE-2026-62065 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Cardea <= 2.3 versions.
CVE-2026-62032 2026-10-11 9.8 Critical
Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions.