Export limit exceeded: 417482 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 417482 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 417482 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 27), (line:1, col:28)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (417482 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-9535 1 Vtk 1 Vtk 2026-10-30 8.2 High
A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2026-96203 1 Microsoft 2 Edge Chromium, Microsoft Edge (chromium-based) 2026-10-30 8.8 High
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-96199 1 Microsoft 2 Edge Chromium, Microsoft Edge (chromium-based) 2026-10-30 8.8 High
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-96198 1 Microsoft 2 Edge Chromium, Microsoft Edge (chromium-based) 2026-10-30 8.8 High
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-96196 1 Microsoft 2 Edge Chromium, Microsoft Edge (chromium-based) 2026-10-30 8.8 High
Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-96192 1 Microsoft 2 Edge Chromium, Microsoft Edge (chromium-based) 2026-10-30 8.8 High
Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.
CVE-2026-94423 1 Getty 1 Net::libssh 2026-10-30 9.1 Critical
Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts. connect reports success as soon as ssh_connect returns SSH_OK. libssh leaves the known-hosts check to the application, and this binding never makes it, so the strict_hostkeycheck and knownhosts options are set on the session and then decide nothing. Password, agent and public-key authentication, channel and SFTP operations all run on a session whose peer was never identified, so an attacker who can redirect the connection receives the password when password authentication is used, and commands and data sent over the session.
CVE-2026-93680 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 9.8 Critical
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.
CVE-2026-93327 2026-10-30 N/A
A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on Google Cloud Platform allows an authenticated attacker to execute arbitrary code using a maliciously crafted serialized object. This vulnerability was patched on 11 September 2026, and no customer action is needed.
CVE-2026-90872 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 6.6 Medium
Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an authenticated Manager administrator to execute arbitrary commands with the privileges of the WS_FTP Server IIS worker process.
CVE-2026-90871 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 5.3 Medium
Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an unauthenticated attacker to affect files outside the intended directory.
CVE-2026-90870 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 5.3 Medium
A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could lead to server resource exhaustion and service degradation.
CVE-2026-90869 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 7.5 High
A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows.
CVE-2026-90868 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 9.9 Critical
An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under certain configurations.
CVE-2026-90867 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 8.1 High
Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose administrative functionality to remote authentication attempts.
CVE-2026-90866 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 9.1 Critical
A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access locations outside their authorized scope, potentially enabling remote code execution.
CVE-2026-90865 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 9 Critical
An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated privileges under certain configurations.
CVE-2026-90864 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 9.1 Critical
A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access or modify files outside their authorized scope.
CVE-2026-90863 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 9.1 Critical
Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to exceed their authorized scope, potentially enabling arbitrary command execution with elevated privileges and complete compromise of the underlying server.
CVE-2026-90862 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 4.3 Medium
Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s password to access certain files associated with that account without satisfying multi-factor authentication requirements.