Search

Expected end of text, found '.' (at char 37), (line:1, col:38)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (372963 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-70442 2026-08-06 4.3 Medium
Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to use.
CVE-2026-67867 1 Systerel 1 S2opc 2026-08-06 N/A
Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when processing PublishResponse EventNotificationList data
CVE-2026-71321 1 Nuxt 1 Nuxt 2026-08-06 7.5 High
Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, the internal island renderer endpoint `/__nuxt_island/...` decodes and hashes attacker-controlled JSON body input with destr and ohash before validating the URL-resident hash. An unauthenticated `POST /__nuxt_island/_.json` with a large JSON body is fully read, parsed, hashed, and then rejected, which wastes CPU on Nitro single event loop and delays concurrent requests. No valid hash and no authentication are required. This issue is fixed in 3.21.10 and 4.5.1.
CVE-2023-54388 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54387 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54386 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54385 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54384 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54383 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54382 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54381 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54380 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54379 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54378 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54377 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54376 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54375 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2026-18970 1 Rongzhitong 1 Visual Integrated Command And Dispatch Platform 2026-08-05 7.3 High
A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. The affected element is an unknown function of the file /dm/dispatch/user/findAll. Executing a manipulation of the argument Name can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-18969 1 Rongzhitong 1 Visual Integrated Command And Dispatch Platform 2026-08-05 7.3 High
A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. Impacted is an unknown function of the file /dm/dispatch/userinfo/upload. Performing a manipulation of the argument File results in unrestricted upload. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-67977 2026-08-05 7.5 High
An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service (DoS) via a crafted input.