Search

Expected end of text, found ':' (at char 25), (line:1, col:26)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (386153 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-84766 2026-09-03 5.9 Medium
Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.
CVE-2026-81295 2026-09-03 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Under Construction <= 5.82 versions.
CVE-2026-84238 2026-09-03 9.8 Critical
Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium < 4.46.0 versions.
CVE-2026-81773 2026-09-03 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Ninja Forms File Uploads Extension <= 3.3.26 versions.
CVE-2026-84834 2026-09-03 9.8 Critical
Unauthenticated PHP Object Injection in JobSearch <= 3.2.0 versions.
CVE-2026-84138 1 Mozilla 2 Firefox, Thunderbird 2026-09-03 6.5 Medium
Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84139 1 Mozilla 2 Firefox, Thunderbird 2026-09-03 6.1 Medium
Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84144 1 Mozilla 2 Firefox, Thunderbird 2026-09-03 7.5 High
Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84848 2026-09-03 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager <= 9.17 versions.
CVE-2026-84847 2026-09-03 7.5 High
Unauthenticated Broken Access Control in Quick Event Manager <= 9.17 versions.
CVE-2026-84140 1 Mozilla 2 Firefox, Thunderbird 2026-09-03 9.8 Critical
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84836 2026-09-03 7.1 High
Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping <= 1.22.3 versions.
CVE-2026-84813 2026-09-03 9.3 Critical
Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions.
CVE-2026-84812 2026-09-03 7.1 High
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions.
CVE-2026-84779 2026-09-03 8.1 High
Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt &amp; MCP for AI Agents <= 1.51.0 versions.
CVE-2026-84778 2026-09-03 7.5 High
Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration &amp; Cloning <= 6.65 versions.
CVE-2026-84777 2026-09-03 7.4 High
Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions.
CVE-2026-84776 2026-09-03 7.5 High
Unauthenticated Denial of Service Attack in MalCare Security <= 6.69 versions.
CVE-2026-84774 2026-09-03 6.1 Medium
Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.11 versions.
CVE-2026-84773 2026-09-03 7.2 High
Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.6 versions.