Search

Expected end of text, found '–' (at char 36), (line:1, col:37)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (413536 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-79888 2026-10-23 8.1 High
No description provided
CVE-2026-79891 2026-10-23 8.1 High
No description provided
CVE-2026-79893 2026-10-23 7.5 High
No description provided
CVE-2026-79894 2026-10-23 7.5 High
No description provided
CVE-2026-79955 2026-10-23 7.5 High
No description provided
CVE-2026-79956 2026-10-23 7.2 High
No description provided
CVE-2026-95704 2026-10-23 7.2 High
No description provided
CVE-2026-95705 2026-10-23 7.2 High
No description provided
CVE-2026-95709 2026-10-23 7.2 High
No description provided
CVE-2026-95711 2026-10-23 7.1 High
No description provided
CVE-2026-95712 2026-10-23 7.1 High
No description provided
CVE-2026-95717 2026-10-23 5.5 Medium
No description provided
CVE-2026-95718 2026-10-23 5.3 Medium
No description provided
CVE-2026-95719 2026-10-23 4.9 Medium
No description provided
CVE-2026-95720 2026-10-23 4.4 Medium
No description provided
CVE-2026-95721 2026-10-23 3.3 Low
No description provided
CVE-2026-114613 1 Msgpack 1 Msgpack-python 2026-10-23 7.5 High
MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension (msgpack._cmsgpack) leaks a decoded map value when deserialization rejects a key with strict_map_key=True (the default). Repeated malformed inputs can cause unbounded process memory growth and denial of service in applications that deserialize attacker-controlled MessagePack data. Both unpackb() and the streaming Unpacker API are affected. The pure-Python fallback does not exhibit this leak in the reported tests. This issue is fixed in version 1.2.3.
CVE-2026-115484 2 Red Hat, Redhat 2 Enterprise Linux, Enterprise Linux 2026-10-23 7.6 High
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the daemon or corrupt its network configuration.
CVE-2026-79860 2026-10-23 9.8 Critical
No description provided
CVE-2026-79861 2026-10-23 9.8 Critical
No description provided