Search

Expected end of text, found '/' (at char 20), (line:1, col:21)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (354956 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-59612 1 Qualcomm 63 Cologne, Cologne Firmware, Fastconnect 6700 and 60 more 2026-06-02 6.7 Medium
Memory corruption in windows drivers while sending incorrect trusted application request
CVE-2025-59613 1 Qualcomm 89 Cologne, Cologne Firmware, Fastconnect 6700 and 86 more 2026-06-02 6.7 Medium
Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.
CVE-2025-59614 1 Qualcomm 43 Cologne, Cologne Firmware, Fastconnect 6900 and 40 more 2026-06-02 6.7 Medium
Memory Corruption when sending random number generator command with insufficient output buffer size.
CVE-2026-24085 1 Qualcomm 547 5g Fixed Wireless Access Platform, 5g Fixed Wireless Access Platform Firmware, Apq8098 and 544 more 2026-06-02 7.2 High
Memory Corruption when processing display command line information due to improper initialization of a variable.
CVE-2026-24087 1 Qualcomm 431 Ar8031, Ar8031 Firmware, Ar8035 and 428 more 2026-06-02 7.2 High
Memory corruption while processing fastboot OEM commands.
CVE-2026-24088 1 Qualcomm 493 Ar9380, Ar9380 Firmware, Csr8811 and 490 more 2026-06-02 8.2 High
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
CVE-2026-24089 1 Qualcomm 439 Ar8031, Ar8031 Firmware, Ar8035 and 436 more 2026-06-02 7.2 High
Memory corruption while processing fastboot commands with invalid input.
CVE-2026-24090 1 Qualcomm 435 Ar8031, Ar8031 Firmware, Ar8035 and 432 more 2026-06-02 7.1 High
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
CVE-2026-24091 1 Qualcomm 547 5g Fixed Wireless Access Platform, 5g Fixed Wireless Access Platform Firmware, Apq8098 and 544 more 2026-06-02 7.2 High
Memory corruption while processing fastboot commands with improperly formatted input.
CVE-2026-24092 1 Qualcomm 437 Ar8031, Ar8031 Firmware, Ar8035 and 434 more 2026-06-02 7.2 High
Memory Corruption when processing fastboot commands to set display mode.
CVE-2024-52011 2026-06-02 8.3 High
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to version 2.9.0, due to the insufficient sanitization of the `file` argument in the `launchEditor`, an attacker can execute arbitrary commands on Windows by supplying a filename that contains special characters. This issue has been fixed in the `launch-editor` version 2.9.0, corresponding to vite version 5.4.9.
CVE-2026-7524 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-06-02 9.8 Critical
IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction.
CVE-2026-45545 2026-06-02 8.2 High
Nextcloud is an open source content collaboration platform. From versions 0.7.0 to before 0.7.7, 0.8.0 to before 0.8.10, 0.9.0 to before 0.9.8, and 1.0.0 to before 1.0.4, an authenticated attacker with access to the Tables app may be able to execute arbitrary up to 20 bytes long SQL queries, through a stored injection. With carefully crafted input it is possible to break out of the length limitation. The attacker could use this to extract information from the database, or modify data. This issue has been patched in versions 0.7.7, 0.8.10, 0.9.8, 1.0.4, and 2.0.0.
CVE-2026-25258 1 Qualcomm 43 Cologne, Cologne Firmware, Fastconnect 6900 and 40 more 2026-06-02 7.8 High
Memory corruption while processing IOCTL calls for escape operations.
CVE-2026-25259 1 Qualcomm 85 Cologne, Cologne Firmware, Fastconnect 6700 and 82 more 2026-06-02 7.8 High
Memory corruption while processing multiple IOCTL command for escape operations.
CVE-2026-25260 1 Qualcomm 71 Cologne, Cologne Firmware, Fastconnect 6700 and 68 more 2026-06-02 7.8 High
Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.
CVE-2026-45284 2026-06-02 4.6 Medium
Nextcloud is an open source content collaboration platform. From version 1.3.6 to before version 8.4.0, an improper check allowed users that where provided by LDAP to still authenticate towards user OIDC after they where deleted. This issue has been patched in version 8.4.0.
CVE-2026-45278 2026-06-02 3.3 Low
Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can craft links that would redirect users to another website, when the victim uses the attackers link to log in via user OIDC. This issue has been patched in version 8.2.2.
CVE-2026-7528 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-06-02 7.1 High
IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled resource consumption.
CVE-2026-10263 1 Sourcecodester 1 Computer Repair Shop Management System 2026-06-02 7.3 High
A vulnerability was found in SourceCodester Computer Repair Shop Management System up to 1.0. Affected is an unknown function of the file /admin/products/manage_product.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.