Search

Expected end of text, found '.' (at char 13), (line:1, col:14)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (385502 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-85302 2026-09-03 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKoi WordPress Themes WPKoi Templates for Elementor allows DOM-Based XSS. This issue affects WPKoi Templates for Elementor: from n/a through 3.7.2.
CVE-2026-84814 2026-09-03 9.8 Critical
Subscriber Privilege Escalation in Bricksforge <= 3.1.8.8 versions.
CVE-2026-84766 2026-09-03 5.9 Medium
Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.
CVE-2026-81295 2026-09-03 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Under Construction <= 5.82 versions.
CVE-2026-84238 2026-09-03 9.8 Critical
Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium < 4.46.0 versions.
CVE-2026-81773 2026-09-03 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Ninja Forms File Uploads Extension <= 3.3.26 versions.
CVE-2026-84834 2026-09-03 9.8 Critical
Unauthenticated PHP Object Injection in JobSearch <= 3.2.0 versions.
CVE-2026-84138 1 Mozilla 2 Firefox, Thunderbird 2026-09-03 6.5 Medium
Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84139 1 Mozilla 2 Firefox, Thunderbird 2026-09-03 6.1 Medium
Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84144 1 Mozilla 2 Firefox, Thunderbird 2026-09-03 7.5 High
Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84848 2026-09-03 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager <= 9.17 versions.
CVE-2026-84847 2026-09-03 7.5 High
Unauthenticated Broken Access Control in Quick Event Manager <= 9.17 versions.
CVE-2026-84140 1 Mozilla 2 Firefox, Thunderbird 2026-09-03 9.8 Critical
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84836 2026-09-03 7.1 High
Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping <= 1.22.3 versions.
CVE-2026-84813 2026-09-03 9.3 Critical
Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions.
CVE-2026-84812 2026-09-03 7.1 High
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions.
CVE-2026-84779 2026-09-03 8.1 High
Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt &amp; MCP for AI Agents <= 1.51.0 versions.
CVE-2026-84778 2026-09-03 7.5 High
Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration &amp; Cloning <= 6.65 versions.
CVE-2026-84777 2026-09-03 7.4 High
Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions.
CVE-2026-84776 2026-09-03 7.5 High
Unauthenticated Denial of Service Attack in MalCare Security <= 6.69 versions.