Search

Expected end of text, found 'én' (at char 17), (line:1, col:18)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (417732 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-109823 1 Tidewave-ai 1 Tidewave 2026-11-04 N/A
An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/connect or via the rendered toolbar. Neither response checks the Host header. A web page that rebinds its own domain to the loopback address can therefore read the tag with a same-origin request, which carries no Origin header. The paths usually reveal the local username and the project layout. This issue affects tidewave: from 0.8.0 before 0.9.2.
CVE-2026-109090 1 X.org 1 Libxi 2026-11-04 7.5 High
A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.
CVE-2026-109089 1 X.org 1 Libxi 2026-11-04 7.5 High
A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.
CVE-2026-108333 1 Tanium 2 Endpoint Configuration Toolset Solution, Threat Response 2026-11-04 2.5 Low
Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.
CVE-2026-108332 1 Tanium 2 Endpoint Configuration Toolset Solution, Threat Response 2026-11-04 6.3 Medium
Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
CVE-2026-108331 1 Tanium 2 Endpoint Configuration Toolset Solution, Threat Response 2026-11-04 3.3 Low
Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
CVE-2026-108330 1 Tanium 2 Endpoint Configuration Toolset Solution, Threat Response 2026-11-04 3.6 Low
Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.
CVE-2026-108329 1 Tanium 1 Threat Response 2026-11-04 8.8 High
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
CVE-2026-108328 1 Tanium 1 Threat Response 2026-11-04 4.2 Medium
Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.
CVE-2026-108326 1 Tanium 2 Cx-stream, Endpoint Configuration Toolset Solution 2026-11-04 6.5 Medium
Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
CVE-2026-108325 1 Tanium 1 Reputation 2026-11-04 6.6 Medium
Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
CVE-2026-108316 1 Tanium 1 Tanium Server 2026-11-04 4.3 Medium
Tanium addressed an information disclosure vulnerability in Tanium Server.
CVE-2026-108310 1 Tanium 1 Tanium Server 2026-11-04 5.3 Medium
Tanium addressed a denial of service vulnerability in Tanium Server.
CVE-2026-108307 1 Tanium 2 Endpoint Configuration Toolset Solution, Index-cx 2026-11-04 7.8 High
Tanium addressed a heap-based buffer overflow vulnerability in Index.
CVE-2026-108306 1 Tanium 2 End-user-cx, Endpoint Configuration Toolset Solution 2026-11-04 7.8 High
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
CVE-2026-108305 1 Tanium 2 End-user-cx, Endpoint Configuration Toolset Solution 2026-11-04 7.8 High
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
CVE-2026-108303 1 Tanium 1 Certificate Manager 2026-11-04 8.8 High
Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.
CVE-2026-108302 1 Tanium 1 Comply 2026-11-04 4.3 Medium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-108301 1 Tanium 1 Comply 2026-11-04 6 Medium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-108142 1 Veeam 1 Backup And Replication 2026-11-04 N/A
A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.