Search

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (413455 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-79860 2026-10-22 9.8 Critical
No description provided
CVE-2026-79859 2026-10-22 9.8 Critical
No description provided
CVE-2026-79858 2026-10-22 9.8 Critical
No description provided
CVE-2026-79857 2026-10-22 9.8 Critical
No description provided
CVE-2026-79856 2026-10-22 9.8 Critical
No description provided
CVE-2026-79855 2026-10-22 9.8 Critical
No description provided
CVE-2026-79854 2026-10-22 9.8 Critical
No description provided
CVE-2026-79853 2026-10-22 9.8 Critical
No description provided
CVE-2026-79852 2026-10-22 9.8 Critical
No description provided
CVE-2026-79846 2026-10-22 10 Critical
No description provided
CVE-2026-55200 1 Libssh2 1 Libssh2 2026-10-22 8.1 High
libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length values to corrupt heap memory and achieve remote code execution.
CVE-2026-15634 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-22 6.5 Medium
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could exploit this vulnerability to poison the web cache, bypass web application firewall protection, and conduct XSS attacks.
CVE-2026-15412 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-22 6.5 Medium
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8  could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
CVE-2026-15396 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-22 6.5 Medium
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could exploit this vulnerability to poison the web cache, bypass web application firewall protection, and conduct XSS attacks.
CVE-2026-13599 1 Abb 1 Ability Edgenius 2026-10-22 7.8 High
Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affects Ability Edgenius: through 3.2.3.0.
CVE-2026-11722 1 Ibm 3 Cics Tx Advanced, Websphere Application Server, Websphere Application Server Liberty 2026-10-22 4.8 Medium
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability.
CVE-2026-11549 1 Ibm 3 Cics Tx Advanced, Websphere Application Server, Websphere Application Server Liberty 2026-10-22 6.5 Medium
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by a virtual host bypass vulnerability.
CVE-2026-11548 1 Ibm 3 Cics Tx Advanced, Websphere Application Server, Websphere Application Server Liberty 2026-10-22 4.8 Medium
IBM WebSphere Application Server 8.5 and 9.0, and and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability.
CVE-2026-115502 2026-10-22 N/A
A missing authorization check allows anyone having access to a "link without login" for a DataApp to list and potentially access jobs of other users created by the same link in KNIME Business Hub prior to 1.19.0. As workaround remove all "links without login" to DataApps.
CVE-2026-115496 2026-10-22 N/A
Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A workaround is not possible.