Export limit exceeded: 10077 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 398176 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 398176 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 28476 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (28476 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-18470 2026-08-10 7.5 High
The Login & Register Forms WordPress plugin before 4.0.2 does not verify that a password reset request comes from the account's owner, and does not adequately redact the address returned in its response, allowing unauthenticated users to obtain registered users' email addresses, including administrators'.
CVE-2026-9031 1 Tp-link 1 Archer A6 V4 2026-08-10 N/A
An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied data before it is processed by internal flash-write handling logic. Successful exploitation may cause httpd process or device to crash, resulting in loss of access to the web interface and a denial-of-service condition.
CVE-2026-19357 1 Mingsoft 1 Mcms 2026-08-10 5.3 Medium
A security flaw has been discovered in MingSoft MCMS up to 3.0.6. Affected is an unknown function of the file /mdiy/form/get of the component ms-mdiy. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2024-21380 1 Microsoft 3 Dynamics 365 Business Central, Dynamics 365 Business Central 2022, Dynamics 365 Business Central 2023 2026-08-10 8 High
Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
CVE-2021-34516 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-10 7.8 High
Win32k Elevation of Privilege Vulnerability
CVE-2024-21304 1 Microsoft 14 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 11 more 2026-08-10 4.1 Medium
Trusted Compute Base Elevation of Privilege Vulnerability
CVE-2023-35391 1 Microsoft 3 .net, Asp.net Core, Visual Studio 2022 2026-08-10 6.2 Medium
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
CVE-2024-21315 1 Microsoft 14 Defender For Endpoint, Windows 10 1507, Windows 10 1607 and 11 more 2026-08-10 7.8 High
Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability
CVE-2023-36897 1 Microsoft 9 365 Apps, Office, Office 2019 and 6 more 2026-08-10 8.1 High
Visual Studio Tools for Office Runtime Spoofing Vulnerability
CVE-2023-36894 1 Microsoft 3 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 2026-08-10 6.5 Medium
Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2023-36893 1 Microsoft 8 365 Apps, Office, Office 2019 and 5 more 2026-08-10 6.5 Medium
Microsoft Outlook Spoofing Vulnerability
CVE-2024-20684 1 Microsoft 9 Windows 11 21h2, Windows 11 21h2, Windows 11 22h2 and 6 more 2026-08-10 6.5 Medium
Windows Hyper-V Denial of Service Vulnerability
CVE-2023-35377 1 Microsoft 19 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 16 more 2026-08-10 6.5 Medium
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-38254 1 Microsoft 19 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 16 more 2026-08-10 6.5 Medium
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-35376 1 Microsoft 19 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 16 more 2026-08-10 6.5 Medium
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-36912 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2026-08-10 7.5 High
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-36908 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-10 6.5 Medium
Windows Hyper-V Information Disclosure Vulnerability
CVE-2023-35368 1 Microsoft 2 Exchange Server, Exchange Server 2016 2026-08-10 8.8 High
Microsoft Exchange Remote Code Execution Vulnerability
CVE-2026-19245 2 Hkuds, Nanobot 2 Nanobot, Nanobot 2026-08-10 3.3 Low
A flaw has been found in HKUDS nanobot up to 0.2.1. The impacted element is the function ExecTool._prepare_command of the file nanobot/agent/tools/shell.py of the component Login-shell Environment Handler. Executing a manipulation can lead to information disclosure. The attack requires local access. The exploit has been published and may be used. Upgrading to version 0.3.0 is sufficient to resolve this issue. This patch is called 4525. The affected component should be upgraded. Multiple issues were reported to the project. They reacted with a high level of professionalism and kindness: "The report concerns shell startup files reintroducing environment variables when command execution defaults to a login shell. The default was changed so exec does not use a login shell unless explicitly requested".
CVE-2026-62296 1 Hapifhir 1 Hl7 Fhir Core 2026-08-10 7.5 High
HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, XhtmlParser.java imposes no maximum element nesting depth, so a deeply nested text.div narrative triggers unbounded recursion between parseElementInner() and parseElement(), raising a StackOverflowError. An attacker who can submit FHIR resources containing such narratives can thus crash a parsing or validation worker thread, affecting validator services and any application that parses attacker-supplied FHIR JSON or XML. This issue is fixed in version 6.9.11.