Search

Expected end of text, found '\' (at char 29), (line:1, col:30)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (413875 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-79893 2026-10-23 7.5 High
No description provided
CVE-2026-79894 2026-10-23 7.5 High
No description provided
CVE-2026-79955 2026-10-23 7.5 High
No description provided
CVE-2026-79956 2026-10-23 7.2 High
No description provided
CVE-2026-95704 2026-10-23 7.2 High
No description provided
CVE-2026-95705 2026-10-23 7.2 High
No description provided
CVE-2026-95709 2026-10-23 7.2 High
No description provided
CVE-2026-95711 2026-10-23 7.1 High
No description provided
CVE-2026-95712 2026-10-23 7.1 High
No description provided
CVE-2026-95717 2026-10-23 5.5 Medium
No description provided
CVE-2026-95718 2026-10-23 5.3 Medium
No description provided
CVE-2026-95719 2026-10-23 4.9 Medium
No description provided
CVE-2026-95720 2026-10-23 4.4 Medium
No description provided
CVE-2026-95721 2026-10-23 3.3 Low
No description provided
CVE-2026-115351 2 Lepture, Mistune Project 2 Mistune, Mistune 2026-10-23 4.7 Medium
Mistune from 3.2.1 before 3.3.0 contains a CSS injection vulnerability that allows attackers controlling markdown input to inject arbitrary style declarations via the unvalidated figwidth option of the figure directive. Attackers can append declarations like background:url() to the rendered figure style attribute, forcing victim browsers to send requests to attacker servers and leak attribute values.
CVE-2026-114613 1 Msgpack 1 Msgpack-python 2026-10-23 7.5 High
MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension (msgpack._cmsgpack) leaks a decoded map value when deserialization rejects a key with strict_map_key=True (the default). Repeated malformed inputs can cause unbounded process memory growth and denial of service in applications that deserialize attacker-controlled MessagePack data. Both unpackb() and the streaming Unpacker API are affected. The pure-Python fallback does not exhibit this leak in the reported tests. This issue is fixed in version 1.2.3.
CVE-2026-115484 2 Red Hat, Redhat 2 Enterprise Linux, Enterprise Linux 2026-10-23 7.6 High
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the daemon or corrupt its network configuration.
CVE-2026-79860 2026-10-23 9.8 Critical
No description provided
CVE-2026-79861 2026-10-23 9.8 Critical
No description provided
CVE-2026-79863 2026-10-23 9.6 Critical
No description provided