Search

Expected end of text, found ':' (at char 26), (line:1, col:27)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (339005 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-66585 2026-08-24 7.5 High
Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions.
CVE-2026-32558 2026-08-24 9.8 Critical
Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.
CVE-2026-32551 2026-08-24 9.3 Critical
Unauthenticated SQL Injection in Woo Essential <= 4.3.0 versions.
CVE-2026-32478 2026-08-24 8.5 High
Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions.
CVE-2026-32477 2026-08-24 8.6 High
Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons <= 2.2.0 versions.
CVE-2026-32476 2026-08-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Brave Conversion Engine (PRO) <= 0.8.6 versions.
CVE-2026-32471 2026-08-24 8.5 High
Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions.
CVE-2026-28190 2026-08-24 7.1 High
Subscriber Broken Access Control in ProLancer Element <= 1.4.8 versions.
CVE-2026-28171 2026-08-24 8.6 High
Unauthenticated Arbitrary File Deletion in WooCommerce File Approval <= 10.7 versions.
CVE-2026-28167 2026-08-24 7.5 High
Unauthenticated Arbitrary File Download in Super Forms <= 6.3.315 versions.
CVE-2026-28166 2026-08-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Tourmaster <= 5.4.9 versions.
CVE-2026-28165 2026-08-24 9.8 Critical
Unauthenticated Privilege Escalation in Digits <= 9.2 versions.
CVE-2026-28162 2026-08-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Events Made Easy <= 3.2.5 versions.
CVE-2026-28153 2026-08-24 7.5 High
Unauthenticated Broken Access Control in Notification Master &#8211; Real-Time WordPress Notifications With Email, SMS, Webhooks &amp; More <= 1.7.1 versions.
CVE-2026-28152 2026-08-24 8.1 High
Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions.
CVE-2026-28151 2026-08-24 8.1 High
Unauthenticated Local File Inclusion in Tonda < 2.6 versions.
CVE-2026-66671 2026-08-24 8.1 High
Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions.
CVE-2026-16313 1 Redhat 3 Enterprise Linux, Openshift, Openshift Container Platform 2026-08-24 7.6 High
A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev device database. This could allow an attacker who can present a crafted SCSI device to execute arbitrary commands as root when the device is disconnected.
CVE-2026-78279 2026-08-24 5.4 Medium
Unauthenticated Cross Site Request Forgery (CSRF) in Fluent Support Pro <= 2.3.1 versions.
CVE-2026-78278 2026-08-24 5.3 Medium
Subscriber Insecure Direct Object References (IDOR) in Fluent Boards Pro <= 2.0.11 versions.