Export limit exceeded: 407404 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (17198 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-62075 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.
CVE-2026-62074 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.
CVE-2026-62070 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.
CVE-2026-62069 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.
CVE-2026-62068 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.
CVE-2026-62067 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Kaven <= 1.2 versions.
CVE-2026-62066 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Volos <= 1.2 versions.
CVE-2026-62065 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Cardea <= 2.3 versions.
CVE-2026-62032 2026-10-11 9.8 Critical
Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions.
CVE-2026-62030 2026-10-11 7.2 High
Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.
CVE-2026-62020 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.
CVE-2026-48194 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.
CVE-2026-48193 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.
CVE-2026-42777 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.
CVE-2026-42724 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.
CVE-2026-42704 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions.
CVE-2026-27350 1 Builderius.io 1 Builderius 2026-10-11 7.2 High
Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This issue affects Builderius: from 1.4 through 1.4-beta.
CVE-2026-108572 1 Casdoor 1 Casdoor 2026-10-11 4.3 Medium
A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate of the file controllers/cas.go of the component Proxy Validation. Such manipulation of the argument pgtUrl leads to server-side request forgery. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. Upgrading to version 4.11.0 is able to address this issue. The name of the patch is 03c6c9aaa2eda5b085ce128ce0d60b34094efbd9/ada08ecd10cbf158f593dee23a8bab63efecf995. It is advisable to upgrade the affected component.
CVE-2026-108542 1 021is 1 Elvix-sdk 2026-10-11 6.3 Medium
A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the component MCP Request Handler. The manipulation of the argument path results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-98281 1 Linux 1 Linux Kernel 2026-10-11 7.8 High
In the Linux kernel, the following vulnerability has been resolved: futex: Also allocate private hash on vfork() As Jann demonstrated, it is entirely feasible to access the mm through vfork(). Therefore we need to allocate a private hash on vfork() as well as any other CLONE_VM user. Specifically, it must be avoided to have (private) futex waiters before allocating the private hash.