Search

Expected end of text, found '\' (at char 27), (line:1, col:28)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (385739 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-81166 2026-09-02 N/A
Missing Authorization vulnerability in Drupal Digital Signage Framework allows Forceful Browsing. This issue affects Digital Signage Framework versions: from 0.0.0 to 2.6.1.
CVE-2026-18260 1 Drupal 1 Disable Login Page 2026-09-02 5.7 Medium
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4.
CVE-2026-81162 2026-09-02 N/A
Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) Experience for Drupal allows Forceful Browsing. This issue affects DXPR Builder: The Best Editing (AI) Experience for Drupal versions: from 0.0.0 to 2.8.1.
CVE-2026-81158 2026-09-02 N/A
Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: from 0.0.0 to 1.8.0.
CVE-2026-81164 2026-09-02 N/A
Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5.
CVE-2026-61773 1 Nvidia 2 Megatron-bridge, Nemo Megatron Bridge 2026-09-02 7.8 High
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-81205 2026-09-02 N/A
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Drupal LDAP / Active Directory Integration allows LDAP Injection. This issue affects LDAP / Active Directory Integration versions: from 0.0.0 to 2.2.1.
CVE-2026-81201 2026-09-02 N/A
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Monster Menus allows Stored XSS. This issue affects Monster Menus versions: from 0.0.0 to 9.5.3.
CVE-2026-81160 2026-09-02 N/A
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Slick Carousel allows Stored XSS. This issue affects Slick Carousel versions: from 0.0.0 to 2.1.0.
CVE-2026-61774 1 Nvidia 2 Megatron-bridge, Nemo Megatron Bridge 2026-09-02 7.8 High
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61775 1 Nvidia 2 Megatron-bridge, Nemo Megatron Bridge 2026-09-02 7.8 High
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61776 1 Nvidia 2 Megatron-bridge, Nemo Megatron Bridge 2026-09-02 7.8 High
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-81288 2 Wordpress, Wp Swings 2 Wordpress, Upsell Order Bump Offer For Woocommerce 2026-09-02 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Upsell Order Bump Offer for WooCommerce <= 3.1.5 versions.
CVE-2026-81775 2 Estatik, Wordpress 2 Estatik, Wordpress 2026-09-02 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Estatik <= 4.3.4 versions.
CVE-2026-81283 2 Wedevs, Wordpress 2 Wp User Frontend, Wordpress 2026-09-02 8.8 High
Subscriber PHP Object Injection in WP User Frontend <= 4.3.10 versions.
CVE-2026-81286 2 Wclovers, Wordpress 2 Wcfm Marketplace, Wordpress 2026-09-02 9.3 Critical
Unauthenticated SQL Injection in WCFM Marketplace <= 3.8.1 versions.
CVE-2026-82223 2 Arraytics, Wordpress 2 Wp Event Solution, Wordpress 2026-09-02 6.5 Medium
Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.22 versions.
CVE-2026-61777 1 Nvidia 2 Megatron-bridge, Nemo Megatron Bridge 2026-09-02 7.8 High
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61778 1 Nvidia 2 Megatron-bridge, Nemo Megatron Bridge 2026-09-02 7.8 High
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61779 1 Nvidia 2 Megatron-bridge, Nemo Megatron Bridge 2026-09-02 7.8 High
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.