Search

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (400540 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-66584 2 Code4recovery, Wordpress 2 12 Step Meeting List, Wordpress 2026-08-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in 12 Step Meeting List <= 3.19.16 versions.
CVE-2026-78258 2 Magepeople, Wordpress 2 Booking & Rental Manager, Wordpress 2026-08-24 5.3 Medium
Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.5 versions.
CVE-2026-78270 2 Wordpress, Wpmanageninja 2 Wordpress, Fluentcrm 2026-08-24 7.6 High
Author SQL Injection in FluentCRM Pro <= 3.1.12 versions.
CVE-2026-78272 2 Wordpress, Wpmanageninja 2 Wordpress, Fluent Support 2026-08-24 5.4 Medium
Subscriber Broken Access Control in Fluent Support Pro <= 2.3.1 versions.
CVE-2026-78277 2 Wordpress, Wpmanageninja 2 Wordpress, Fluentcrm 2026-08-24 4.9 Medium
Subscriber Server Side Request Forgery (SSRF) in FluentCRM Pro <= 3.1.12 versions.
CVE-2026-78278 2 Wordpress, Wpmanageninja 2 Wordpress, Fluent Forms 2026-08-24 5.3 Medium
Subscriber Insecure Direct Object References (IDOR) in Fluent Boards Pro <= 2.0.11 versions.
CVE-2026-78279 2 Wordpress, Wpmanageninja 2 Wordpress, Fluent Support 2026-08-24 5.4 Medium
Unauthenticated Cross Site Request Forgery (CSRF) in Fluent Support Pro <= 2.3.1 versions.
CVE-2026-28151 2 Select-themes, Wordpress 2 Tonda Core, Wordpress 2026-08-24 8.1 High
Unauthenticated Local File Inclusion in Tonda < 2.6 versions.
CVE-2026-32477 2 Radiustheme, Wordpress 2 Shopbuilder – Elementor Woocommerce Builder Addons, Wordpress 2026-08-24 8.6 High
Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons <= 2.2.0 versions.
CVE-2026-32478 2 Wedevs, Wordpress 2 Wp Project Manager, Wordpress 2026-08-24 8.5 High
Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions.
CVE-2026-66650 2 Themerex, Wordpress 2 Freightco, Wordpress 2026-08-24 9.8 Critical
Unauthenticated PHP Object Injection in FreightCo <= 1.1.15 versions.
CVE-2026-17033 1 Grafana 1 Grafana 2026-08-24 6.8 Medium
An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL. The attacker is authorized to create the alert, but not to execute script in another user's Grafana session. Grafana renders alert.generatorURL directly as the Alert Details See source LinkButton href without URL-scheme sanitization or a safe-protocol allowlist. The click interceptor's :// heuristic can be bypassed by placing :// inside a JavaScript comment. When a user with read access clicks See source, the browser executes attacker-controlled JavaScript in the Grafana origin with the clicking user's permissions.
CVE-2026-16927 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-24 7.3 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use (TOCTOU) race condition.
CVE-2026-16928 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-24 7.5 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.
CVE-2026-16932 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-24 8.8 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable.
CVE-2026-16930 1 Ibm 39 Power System E1050 \(9043-mrx\), Power System E1050 \(9043-mrx\) Firmware, Power System E1080 \(9080-hex\) and 36 more 2026-08-24 8.2 High
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can execute arbitrary code on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.
CVE-2026-16989 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-24 7.1 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper resolution of symbolic links.
CVE-2026-70940 1 Oracle 1 Hyperion Financial Management 2026-08-24 8.8 High
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-70950 1 Oracle 1 Hyperion Financial Management 2026-08-24 7.2 High
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-70969 1 Oracle 1 Hyperion Financial Management 2026-08-24 6.5 Medium
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).