Search

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (373100 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-19447 1 Fileorbis 1 Fileorbis 2026-08-21 5.4 Medium
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fileorbis Informatics Services Trade Inc. FileOrbis allows Stored XSS. This issue affects FileOrbis: before 16.5.
CVE-2026-15585 1 Akin 1 Akinsoft Wolvox9 Erp / Kontrolpanel.exe 2026-08-21 7.5 High
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. AKINSOFT Wolvox9 ERP / KontrolPanel.exe allows Path Traversal. This issue affects AKINSOFT Wolvox9 ERP / KontrolPanel.exe: from s26.02.17 before 26.02.22.
CVE-2026-5224 1 Kriptok Crypto 1 Cryptosim 2026-08-21 5.7 Medium
Cleartext storage of sensitive information vulnerability in Kriptok Crypto and Information Technologies Industry Trade Inc. Cryptosim allows Retrieve Embedded Sensitive Data. This issue affects Cryptosim: before 3.1.0.229.
CVE-2026-16309 1 Netiket Information Technologies 1 Edoweb 2026-08-21 5.3 Medium
Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EdoWEB: before 780-g7.
CVE-2026-50575 1 Unitronix 1 Betterdesk 2026-08-21 7.7 High
BetterDesk is a remote desktop management solution. BetterDesk versions through 2.3.0 improperly invalidate deleted device identities, allowing an unauthenticated client to replay or spoof a device ID and bypass registration controls. Version 3.0.0-alpha contains a patch. No known workarounds are available.
CVE-2026-28567 2 Fahad Mahmood, Wordpress 2 Wp Sort Order, Wordpress 2026-08-21 7.5 High
Unauthenticated Broken Access Control in WP Sort Order <= 1.3.5 versions.
CVE-2026-28570 2 Spabrice, Wordpress 2 Vavo Core, Wordpress 2026-08-21 8.1 High
Unauthenticated Local File Inclusion in Vavo Core <= 2.3.0 versions.
CVE-2026-32444 2 Cwicly, Wordpress 2 Cwicly, Wordpress 2026-08-21 9.9 Critical
Contributor Remote Code Execution (RCE) in Cwicly <= 1.4.4 versions.
CVE-2026-32463 2 Kamlesh Parmar, Wordpress 2 Sync Post With Other Site, Wordpress 2026-08-21 9.9 Critical
Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions.
CVE-2026-32464 2 Vladimir Prelovac, Wordpress 2 Theme Test Drive, Wordpress 2026-08-21 8.1 High
Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.
CVE-2026-32466 2 Wordpress, Wpexperts 2 Wordpress, Gravity Forms Bookings Premium 2026-08-21 8.5 High
Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.
CVE-2026-32467 2 Apoyl, Wordpress 2 [aotuman] Grab Wechat Articles, Wordpress 2026-08-21 6 Medium
Subscriber Server Side Request Forgery (SSRF) in [Aotuman] Grab WeChat Articles <= 2.0.1 versions.
CVE-2026-32472 2 Wbolt.com, Wordpress 2 Online Contact Widget, Wordpress 2026-08-21 7.5 High
Unauthenticated Broken Access Control in Online Contact Widget <= 1.3.0 versions.
CVE-2026-32473 2 Deknows, Wordpress 2 Pdf Smart Viewer For Elementor, Wordpress 2026-08-21 7.2 High
Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.
CVE-2026-32474 2 Wordpress, Wpwax 2 Wordpress, Templatiq 2026-08-21 9.9 Critical
Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions.
CVE-2026-66620 2 Derek Herman, Wordpress 2 Optiontree, Wordpress 2026-08-21 7.2 High
Editor PHP Object Injection in OptionTree <= 2.7.3 versions.
CVE-2026-66627 2 Edge22 Studios Ltd., Wordpress 2 Gp Premium, Wordpress 2026-08-21 9.9 Critical
Contributor Arbitrary File Upload in GP Premium <= 2.5.5 versions.
CVE-2026-66633 2 Wordpress, Wpmanageninja 2 Wordpress, Fluent Forms Pro Add On Pack 2026-08-21 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack < 6.2.12 versions.
CVE-2026-66634 2 Pantherius, Wordpress 2 Modal Survey, Wordpress 2026-08-21 4.3 Medium
Subscriber Insecure Direct Object References (IDOR) in Modal Survey <= 2.0.2.2.3 versions.
CVE-2026-66639 2 Wordpress, Wpzoom 2 Wordpress, Wpzoom Forms – Contact Form Plugin For Gutenberg 2026-08-21 6.5 Medium
Contributor Cross Site Scripting (XSS) in WPZOOM Forms – Contact Form Plugin for Gutenberg <= 2.0.4 versions.