Search

Expected end of text, found '–' (at char 34), (line:1, col:35)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (413877 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-79864 2026-10-23 9.6 Critical
No description provided
CVE-2026-79865 2026-10-23 9.6 Critical
No description provided
CVE-2026-79866 2026-10-23 9.6 Critical
No description provided
CVE-2026-79867 2026-10-23 9.6 Critical
No description provided
CVE-2026-79868 2026-10-23 9.6 Critical
No description provided
CVE-2026-79871 2026-10-23 9.6 Critical
No description provided
CVE-2026-79873 2026-10-23 9.3 Critical
No description provided
CVE-2026-79875 2026-10-23 9.3 Critical
No description provided
CVE-2026-79878 2026-10-23 8.8 High
No description provided
CVE-2026-79879 2026-10-23 8.8 High
No description provided
CVE-2026-79881 2026-10-23 8.5 High
No description provided
CVE-2026-79883 2026-10-23 8.3 High
No description provided
CVE-2026-79884 2026-10-23 8.2 High
No description provided
CVE-2026-79885 2026-10-23 8.2 High
No description provided
CVE-2026-79886 2026-10-23 8.2 High
No description provided
CVE-2026-79889 2026-10-23 8.1 High
No description provided
CVE-2026-79892 2026-10-23 7.8 High
No description provided
CVE-2026-79895 2026-10-23 7.5 High
No description provided
CVE-2026-115349 2 Lepture, Mistune Project 2 Mistune, Mistune 2026-10-23 7.5 High
Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity denial of service vulnerability in the parse_link_text function in src/mistune/helpers.py. Attackers can submit markdown with deeply nested square brackets triggering quadratic parsing time, exhausting server CPU with small crafted requests.
CVE-2026-115371 2 Linuxcontainers, Lxc 2 Incus, Incus 2026-10-23 7.1 High
Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an improper authorization vulnerability that allows restricted TLS clients to read storage bucket keys in the default project. Attackers can query the bucket keys endpoints to obtain S3 access and secret keys, then read, modify or delete objects in those buckets.