Search

Expected end of text, found '\' (at char 31), (line:1, col:32)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (375115 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-24076 1 Qualcomm 1 Snapdragon 2026-08-06 6.7 Medium
Memory Corruption when processing registry values with incorrect types using a direct query method.
CVE-2023-54389 2026-08-06 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54388 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54387 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54386 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54385 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54384 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54383 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54382 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54381 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54380 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54379 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54378 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54377 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54376 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54375 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2026-70427 1 Jenkins Project 1 Jenkins 2026-08-05 4.3 Medium
Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empty names during the extraction of `.tar` and `.tar.gz` archives, allowing attackers able to control agent processes to provide crafted archives to the controller to write files to arbitrary locations on the file system, restricted only by file system access permissions of the user running Jenkins.
CVE-2026-70431 1 Jenkins Project 1 Jenkins Multijob Plugin 2026-08-05 8.8 High
Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.
CVE-2026-52521 1 Zblogcn 1 Zblogphp 2026-08-05 8.1 High
A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat feature.
CVE-2026-67673 2026-08-05 4.6 Medium
A stack-based buffer overflow vulnerability exists in the cmd_edl function of OreSat Firmware v1.0. The vulnerability is triggered when processing the edl fw_flash command, where the <filename> argument is copied to a 64-byte stack buffer via memcpy without proper length validation. An attacker with physical access to the UART3 serial interface can exploit this vulnerability by sending a maliciously crafted command with an oversized filename parameter,