Search

Expected end of text, found ',' (at char 36), (line:1, col:37)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (381667 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-74011 2 Revmakx, Wordpress 2 Infinitewp Client, Wordpress 2026-08-20 7.6 High
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects InfiniteWP Client: from n/a through 1.13.9.
CVE-2026-73993 2 Roxnor, Wordpress 2 Fundengine, Wordpress 2026-08-20 9.8 Critical
Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.
CVE-2026-73992 2 Jonathan Daggerhart, Wordpress 2 Query Wrangler, Wordpress 2026-08-20 9.9 Critical
Subscriber Remote Code Execution (RCE) in Query Wrangler <= 1.5.57 versions.
CVE-2026-68566 2 Repute Infosystems, Wordpress 2 Bookingpress Appointment Booking Pro, Wordpress 2026-08-20 9.3 Critical
Unauthenticated SQL Injection in BookingPress Appointment Booking Pro <= 6.0.2 versions.
CVE-2026-66682 2 Tychesoftwares, Wordpress 2 Abandoned Cart Pro For Woocommerce, Wordpress 2026-08-20 9.8 Critical
Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.
CVE-2026-66649 2 E-plugins, Wordpress 2 Directory Pro, Wordpress 2026-08-20 9.3 Critical
Unauthenticated SQL Injection in Directory Pro <= 2.5.8 versions.
CVE-2026-66615 2 Eric Teubert, Wordpress 2 Podlove Podcast Publisher, Wordpress 2026-08-20 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Podlove Podcast Publisher <= 4.5.4 versions.
CVE-2026-66600 2 Davidlingren, Wordpress 2 Media Library Assistant, Wordpress 2026-08-20 9.1 Critical
Author Arbitrary File Upload in Media LIbrary Assistant <= 3.39 versions.
CVE-2026-66597 2 Melograno Venture Studio, Wordpress 2 Wpdatatables, Wordpress 2026-08-20 7.1 High
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.4 versions.
CVE-2026-66582 2 Cozmoslabs, Wordpress 2 Translatepress, Wordpress 2026-08-20 7.1 High
Unauthenticated Cross Site Scripting (XSS) in TranslatePress <= 3.3.2 versions.
CVE-2026-63016 1 Apache 1 Inlong 2026-08-20 5.3 Medium
Uncontrolled Resource Consumption vulnerability in Apache InLong. Users could affect operational configuration or allow upload of non-official packages. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/12095 https://github.com/apache/inlong/pull/11732
CVE-2026-28150 2 Uxper, Wordpress 2 Golo Framework, Wordpress 2026-08-20 8.1 High
Unauthenticated Local File Inclusion in Golo Framework < 1.7.5 versions.
CVE-2026-18102 1 Ibm 1 I 2026-08-20 3.5 Low
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking.
CVE-2026-17015 1 Ibm 1 I 2026-08-20 5.4 Medium
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read.
CVE-2026-16932 1 Ibm 2 Aix, Powervm Vios 2026-08-20 8.8 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable.
CVE-2026-16927 1 Ibm 2 Aix, Powervm Vios 2026-08-20 7.3 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use (TOCTOU) race condition.
CVE-2026-16925 1 Ibm 2 Aix, Powervm Vios 2026-08-20 7.1 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve privilege escalation due to improper authorization.
CVE-2026-16924 1 Ibm 2 Aix, Powervm Vios 2026-08-20 7.5 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper calculation of a memory offset during IPsec decapsulation.
CVE-2026-16922 1 Ibm 2 Aix, Powervm Vios 2026-08-20 7 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use (TOCTOU) race condition.
CVE-2026-14951 1 Frauscher Sensortechnik 1 Fds 102 2026-08-20 8 High
An low privileged remote attacker can cause authenticated users to perform unintended actions in the FDS Web interface using malicious web pages.