Search

Expected end of text, found '\' (at char 30), (line:1, col:31)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (359291 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-10286 1 Codeastro 1 Payroll System 2026-06-02 6.3 Medium
A vulnerability was found in CodeAstro Payroll System 1.0. This affects an unknown part of the file /home_employee.php. The manipulation of the argument emp_id results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.
CVE-2026-7365 1 Ibm 3 Operations Analytics - Log Analysis, Operations Analytics Log Analysis, Operations Analytics Log Analysis 2026-06-02 8.4 High
IBM Operations Analytics - Log Analysis  and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.
CVE-2026-10280 1 Horizon921 1 Mcpilot 2026-06-02 7.3 High
A security flaw has been discovered in horizon921 mcpilot 0.1.0. The impacted element is an unknown function of the file client/src/app/api/mcp/call/route.ts of the component MCP API Call Endpoint. The manipulation of the argument serverBaseUrl results in server-side request forgery. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-43958 1 Redhat 1 Enterprise Linux 2026-06-02 7.8 High
A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary code execution, impacting the integrity and confidentiality of data.
CVE-2026-28116 2 Emiliaprojects, Wordpress 2 Progress Planner, Wordpress 2026-06-02 5.9 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Emilia Projects Progress Planner allows Stored XSS. This issue affects Progress Planner: from n/a through 1.9.0.
CVE-2026-49782 2 Elementor, Wordpress 2 Elementor Website Builder, Wordpress 2026-06-02 5.4 Medium
Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elementor Website Builder: from n/a through 4.1.0.
CVE-2025-59612 1 Qualcomm 63 Cologne, Cologne Firmware, Fastconnect 6700 and 60 more 2026-06-02 6.7 Medium
Memory corruption in windows drivers while sending incorrect trusted application request
CVE-2025-59613 1 Qualcomm 89 Cologne, Cologne Firmware, Fastconnect 6700 and 86 more 2026-06-02 6.7 Medium
Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.
CVE-2025-59614 1 Qualcomm 43 Cologne, Cologne Firmware, Fastconnect 6900 and 40 more 2026-06-02 6.7 Medium
Memory Corruption when sending random number generator command with insufficient output buffer size.
CVE-2026-24085 1 Qualcomm 547 5g Fixed Wireless Access Platform, 5g Fixed Wireless Access Platform Firmware, Apq8098 and 544 more 2026-06-02 7.2 High
Memory Corruption when processing display command line information due to improper initialization of a variable.
CVE-2026-24087 1 Qualcomm 431 Ar8031, Ar8031 Firmware, Ar8035 and 428 more 2026-06-02 7.2 High
Memory corruption while processing fastboot OEM commands.
CVE-2026-24088 1 Qualcomm 493 Ar9380, Ar9380 Firmware, Csr8811 and 490 more 2026-06-02 8.2 High
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
CVE-2026-24089 1 Qualcomm 439 Ar8031, Ar8031 Firmware, Ar8035 and 436 more 2026-06-02 7.2 High
Memory corruption while processing fastboot commands with invalid input.
CVE-2026-24090 1 Qualcomm 435 Ar8031, Ar8031 Firmware, Ar8035 and 432 more 2026-06-02 7.1 High
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
CVE-2026-24091 1 Qualcomm 547 5g Fixed Wireless Access Platform, 5g Fixed Wireless Access Platform Firmware, Apq8098 and 544 more 2026-06-02 7.2 High
Memory corruption while processing fastboot commands with improperly formatted input.
CVE-2026-24092 1 Qualcomm 437 Ar8031, Ar8031 Firmware, Ar8035 and 434 more 2026-06-02 7.2 High
Memory Corruption when processing fastboot commands to set display mode.
CVE-2026-7524 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-06-02 9.8 Critical
IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction.
CVE-2026-25258 1 Qualcomm 43 Cologne, Cologne Firmware, Fastconnect 6900 and 40 more 2026-06-02 7.8 High
Memory corruption while processing IOCTL calls for escape operations.
CVE-2026-25259 1 Qualcomm 85 Cologne, Cologne Firmware, Fastconnect 6700 and 82 more 2026-06-02 7.8 High
Memory corruption while processing multiple IOCTL command for escape operations.
CVE-2026-25260 1 Qualcomm 71 Cologne, Cologne Firmware, Fastconnect 6700 and 68 more 2026-06-02 7.8 High
Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.