Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (17129 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-108554 1 Pdfmathtranslate 1 Pdfmathtranslate 2026-10-11 5.3 Medium
PDFMathTranslate (pdf2zh) through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the Link input. The translate_file handler passes user URLs to download_with_limit without scheme or address validation, letting attackers reach internal services and cloud metadata endpoints and retrieve returned PDFs.
CVE-2026-66566 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.
CVE-2026-62115 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.
CVE-2026-62099 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.
CVE-2026-62096 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.
CVE-2026-62094 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.
CVE-2026-62092 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.
CVE-2026-62075 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.
CVE-2026-62074 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.
CVE-2026-62070 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.
CVE-2026-62069 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.
CVE-2026-62068 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.
CVE-2026-62067 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Kaven <= 1.2 versions.
CVE-2026-62066 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Volos <= 1.2 versions.
CVE-2026-62065 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Cardea <= 2.3 versions.
CVE-2026-62032 2026-10-11 9.8 Critical
Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions.
CVE-2026-62030 2026-10-11 7.2 High
Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.
CVE-2026-62020 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.
CVE-2026-48194 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.
CVE-2026-48193 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.