Export limit exceeded: 414019 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 414019 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 29998 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (17569 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-68713 1 Rakuten 1 Send Anywhere For Android 2026-06-26 8 High
An issue was discovered in Rakuten Send Anywhere (File Transfer) for Android (com.estmob.android.sendanywhere) 23.2.9. The vulnerability allows untrusted applications (with no permissions) to force arbitrary file downloads into the app's scoped storage. The resulting files appear in the application's trusted Received interface. These conditions establish a vector for arbitrary code execution if the payload is an APK file, or a denial-of-service condition through resource exhaustion from oversized transfers.
CVE-2026-50872 1 Fossar 1 Selfoss 2026-06-26 9.8 Critical
An issue in the loopback request handling component of fossar selfoss v2.20-SNAPSHOT allows attackers to execute arbitrary commands and obtain sensitive information via supplying a crafted HTTP request.
CVE-2026-50880 1 Youtransfer 1 Youtransfer 2026-06-26 9.8 Critical
An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request.
CVE-2026-50887 1 Shlink 1 Shlink 2026-06-26 9.1 Critical
A Server-Side Request Forgery (SSRF) in the automatic short URL title resolution component of shlink v5.0.1 allows attackers to scan internal resources via supplying a crafted longUrl.
CVE-2026-44932 1 Suse 1 Wicked 2026-06-26 8.8 High
Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a malicious DHCP server to execute code on the local machine.
CVE-2025-69105 2 Themerex, Wordpress 2 Modernee, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Modernee <= 1.6.0 versions.
CVE-2025-69112 2 Themerex, Wordpress 2 Planty, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Planty <= 1.14.0 versions.
CVE-2025-69113 2 Themerex, Wordpress 2 Nexio, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Nexio <= 1.10.0 versions.
CVE-2025-69114 2 Themerex, Wordpress 2 Maxinet, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in MaxiNet <= 1.2.10 versions.
CVE-2025-69116 2 Themerex, Wordpress 2 Iona, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Iona <= 1.0.8 versions.
CVE-2025-69118 2 Themerex, Wordpress 2 Copypress, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in CopyPress <= 1.4.5 versions.
CVE-2025-69124 2 Themerex, Wordpress 2 Especio, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Especio <= 1.0 versions.
CVE-2025-69142 2 Themerex, Wordpress 2 Abelle, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Abelle <= 1.22 versions.
CVE-2025-69143 2 Themerex, Wordpress 2 Mission, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Mission <= 1.22 versions.
CVE-2025-69146 2 Themerex, Wordpress 2 Dom, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Dom <= 1.24 versions.
CVE-2025-69147 2 Themerex, Wordpress 2 Putter, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Putter <= 1.17 versions.
CVE-2025-69150 2 Themerex, Wordpress 2 Medeus, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Medeus <= 1.14 versions.
CVE-2025-69159 2 Themerex, Wordpress 2 Printo, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Printo <= 1.11 versions.
CVE-2025-69160 2 Themerex, Wordpress 2 Gita, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Gita <= 1.11 versions.
CVE-2025-69162 2 Themerex, Wordpress 2 Grecko, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Grecko <= 5.17 versions.