Search

Expected end of text, found '/' (at char 46), (line:1, col:47)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (415336 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-18199 1 Zohocorp 2 Manageengine Pam360, Manageengine Password Manager Pro 2026-11-02 8.8 High
Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability.
CVE-2026-101172 2026-11-02 6.2 Medium
Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality.
CVE-2026-101171 2026-11-02 3.6 Low
Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
CVE-2026-101175 2026-11-02 4.3 Medium
Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101179 2026-11-02 4.7 Medium
Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101180 2026-11-02 4.3 Medium
DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101184 2026-11-02 5.5 Medium
Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101178 2026-11-02 6.6 Medium
Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-103310 2026-11-02 5.3 Medium
The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the authenticity of payment notifications when the merchant secret is unset, which is the default state, allowing unauthenticated attackers to forge a payment confirmation and mark any order as paid without payment.
CVE-2026-101177 2026-11-02 3.7 Low
Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-101174 2026-11-02 5.7 Medium
DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101173 2026-11-02 6.5 Medium
DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101176 2026-11-02 7.1 High
Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-101186 2026-11-02 7.5 High
DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101185 2026-11-02 5.9 Medium
OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-101183 2026-11-02 5.9 Medium
UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101182 2026-11-02 5.9 Medium
Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-81799 2 Wordpress, Wpswings 2 Wordpress, Return Refund And Exchange For Woocommerce 2026-11-02 7.5 High
Missing Authorization vulnerability in WP Swings Return Refund and Exchange For WooCommerce woo-refund-and-exchange-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Return Refund and Exchange For WooCommerce: from n/a through 4.6.4.
CVE-2026-101181 2026-11-02 5.5 Medium
Permission control vulnerability in the WLAN module.  Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-28160 2 E4jvikwp, Wordpress-extensions 2 Vikrentcar, Vikrentcar 2026-11-02 7.1 High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Stored XSS.This issue affects VikRentCar: from n/a through 1.4.10.