Export limit exceeded: 375032 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 23), (line:1, col:24)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (375032 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-2640 1 Lenovo 2 Pc Manager, Pcmanager 2026-08-24 5.5 Medium
During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could allow a local authenticated user to terminate privileged processes.
CVE-2026-16980 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-24 6.3 Medium
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper validation of symbolic links.
CVE-2026-16973 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-24 5.5 Medium
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read.
CVE-2026-16972 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-24 6.5 Medium
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to improper authentication.
CVE-2026-16958 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-24 6.5 Medium
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.
CVE-2026-16952 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-24 5.5 Medium
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption.
CVE-2026-16951 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-24 6.7 Medium
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute arbitrary code due to a heap-based buffer overflow.
CVE-2026-16946 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-24 7.8 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap buffer overflow.
CVE-2026-16944 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-24 6.7 Medium
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow.
CVE-2026-16943 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-24 8.2 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a heap-based buffer overflow.
CVE-2026-16937 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-24 7.8 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management.
CVE-2026-16936 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-24 8.8 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow.
CVE-2026-16934 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-24 8.8 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap-based buffer overflow.
CVE-2026-0827 1 Lenovo 3 Diagnostics, Hardware Scan, Vantage 2026-08-24 7.1 High
During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to perform an arbitrary file write with elevated privileges.
CVE-2026-78317 1 Deltaww 1 Diaenergie 2026-08-24 8.8 High
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78316 1 Deltaww 1 Diaenergie 2026-08-24 8.8 High
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78315 1 Deltaww 1 Diaenergie 2026-08-24 8.8 High
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78314 1 Deltaww 1 Diaenergie 2026-08-24 8.8 High
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78213 1 Hepta Platforms 1 Heptabase 2026-08-24 8.7 High
Heptabase developed by Hepta Platforms, Inc. has a Stored Cross-Site Scripting vulnerability. Authenticated remote attackers can inject persistent malicious content into specific pages, causing arbitrary JavaScript code to execute when other users click the crafted content.
CVE-2026-78187 1 Piwigo 1 Piwigo 2026-08-24 3.1 Low
A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The exploitability is said to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 16.4.0 will fix this issue. The name of the patch is 5277a7dee4b8f1a174f1d69e1e2a4e1c82a3fc9e. It is recommended to upgrade the affected component.