Export limit exceeded: 377486 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 23), (line:1, col:24)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (377486 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-48002 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2021-48001 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2021-48000 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2021-47999 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2021-47998 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2021-47997 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2022-51007 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2022-51006 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2022-51005 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2022-51004 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2022-51003 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2022-51002 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2022-51001 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2026-13415 2026-08-27 7.2 High
The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing settings via one of its AJAX actions, allowing users with the Editor role (when the administrator has granted the Editor role access to the CMP WordPress plugin before 4.1.18's admin-bar controls) to update arbitrary WordPress options, including options that lead to privilege escalation to Administrator.
CVE-2026-16568 2026-08-27 4.3 Medium
The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not verify that the requesting user owns the customer profile being queried through one of its REST endpoints, allowing any authenticated user (e.g. a customer/subscriber) to retrieve other users' personal data, including their email address, name, and roles.
CVE-2026-78893 1 Google 1 Chrome 2026-08-27 6.5 Medium
Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78894 1 Google 1 Chrome 2026-08-27 3.1 Low
Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78896 1 Google 1 Chrome 2026-08-27 4.3 Medium
Information leak in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-78897 1 Google 1 Chrome 2026-08-27 6.5 Medium
Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Low)
CVE-2026-78900 1 Google 1 Chrome 2026-08-27 9.6 Critical
Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)