Export limit exceeded: 398715 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9875 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-45692 1 Caddyserver 1 Caddy 2026-06-26 5.4 Medium
Caddy is an extensible server platform that uses TLS by default. From 2.4.0 until 2.11.3, the authorization layer and the /config traversal layer do not agree on what object the path refers to. In this case, a path authorized for one config object is accepted, but then resolves to a different config object during traversal. This happens because the authorization layer uses string prefix matching and the /config traversal layer parses array indices numerically using strconv.Atoi(). This vulnerability is fixed in 2.11.3.
CVE-2026-53914 1 Jetbrains 1 Kotlin 2026-06-26 6.7 Medium
In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata
CVE-2025-71340 2 Mmaitre314, Picklescan 2 Picklescan, Picklescan 2026-06-26 8.1 High
picklescan through 0.0.26 fails to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpreter.runcode in __reduce__ methods. Attackers can embed undetected code in pickle files that executes arbitrary commands when the file is loaded via pickle.load(), enabling supply chain attacks on PyTorch models and saved Python objects. This is fixed in version 0.0.30.
CVE-2026-44622 1 Evoke 1 Evoke Csms 2026-06-26 6.5 Medium
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
CVE-2026-39006 1 Agentpp 1 Snmp4j-agent 2026-06-26 9.8 Critical
An issue in SNMP4J-Agent 3.8.3 allows a remote attacker to execute arbitrary code via the snmp4jCfgStoragePath component.
CVE-2026-39478 2 Eli Scheetz, Wordpress 2 Anti-malware Security And Brute-force Firewall, Wordpress 2026-06-26 8.8 High
Contributor PHP Object Injection in Anti-Malware Security and Brute-Force Firewall <= 4.23.87 versions.
CVE-2026-39554 2 Elated-themes, Wordpress 2 Fidalgo, Wordpress 2026-06-26 8.1 High
Unauthenticated PHP Object Injection in Fidalgo <= 1.2.2 versions.
CVE-2026-39567 2 Select-themes, Wordpress 2 Santé, Wordpress 2026-06-26 8.1 High
Unauthenticated PHP Object Injection in Santé <= 1.5.1 versions.
CVE-2026-39577 2 Elated-themes, Wordpress 2 Playroom, Wordpress 2026-06-26 8.1 High
Unauthenticated PHP Object Injection in Playroom <= 1.4.1 versions.
CVE-2026-39578 2 Elated-themes, Wordpress 2 Valiance, Wordpress 2026-06-26 8.1 High
Unauthenticated PHP Object Injection in Valiance <= 1.2 versions.
CVE-2026-39580 2 Select-themes, Wordpress 2 Micdrop, Wordpress 2026-06-26 8.1 High
Unauthenticated PHP Object Injection in Micdrop <= 1.3.1 versions.
CVE-2026-40751 2 Mikado-themes, Wordpress 2 Ashtanga, Wordpress 2026-06-26 8.1 High
Unauthenticated PHP Object Injection in Ashtanga <= 1.2 versions.
CVE-2026-40755 2 Mikado-themes, Wordpress 2 Techlink, Wordpress 2026-06-26 8.1 High
Unauthenticated PHP Object Injection in TechLink <= 1.3 versions.
CVE-2026-40758 2 Elated-themes, Wordpress 2 Léonie, Wordpress 2026-06-26 8.1 High
Unauthenticated PHP Object Injection in Léonie <= 1.2.1 versions.
CVE-2026-40759 2 Mikado-themes, Wordpress 2 Esmée, Wordpress 2026-06-26 8.1 High
Unauthenticated PHP Object Injection in Esmée <= 1.4 versions.
CVE-2026-40735 2 Edge-themes, Wordpress 2 Reina, Wordpress 2026-06-26 8.1 High
Unauthenticated PHP Object Injection in Reina <= 2.1 versions.
CVE-2025-69111 2 Themerex, Wordpress 2 Reisen, Wordpress 2026-06-26 9.8 Critical
Unauthenticated PHP Object Injection in Reisen <= 1.4.1 versions.
CVE-2025-69127 2 Themerex, Wordpress 2 Plumbing, Wordpress 2026-06-26 9.8 Critical
Unauthenticated PHP Object Injection in Plumbing <= 1.6 versions.
CVE-2026-39556 2 Elated-themes, Wordpress 2 Konsept, Wordpress 2026-06-26 8.1 High
Unauthenticated PHP Object Injection in Konsept <= 1.9 versions.
CVE-2026-39560 2 Select-themes, Wordpress 2 Hiroshi, Wordpress 2026-06-26 8.1 High
Unauthenticated PHP Object Injection in Hiroshi <= 1.5.1 versions.