Search

Expected end of text, found '.' (at char 12), (line:1, col:13)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (359004 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-27429 2026-06-17 9.8 Critical
Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions.
CVE-2026-34893 2026-06-17 8.1 High
Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions.
CVE-2026-34894 2026-06-17 8.1 High
Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions.
CVE-2025-48571 1 Google 1 Android 2026-06-17 4.3 Medium
In multiple functions of btm_sec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2026-34895 2026-06-17 8.1 High
Unauthenticated Local File Inclusion in Softlab Core < 1.2.11 versions.
CVE-2026-39433 2026-06-17 6.5 Medium
Subscriber Arbitrary Content Deletion in WPAMS < 49.5.3 versions.
CVE-2026-39438 2026-06-17 9.3 Critical
Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions.
CVE-2026-39443 2026-06-17 8.1 High
Unauthenticated PHP Object Injection in EmallShop <= 2.4.21 versions.
CVE-2026-39446 2026-06-17 8.1 High
Unauthenticated PHP Object Injection in Kapee < 1.7.0 versions.
CVE-2026-39522 2026-06-17 8.1 High
Unauthenticated Local File Inclusion in Solene <= 3.4 versions.
CVE-2026-39529 2026-06-17 9.8 Critical
Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions.
CVE-2026-39539 2026-06-17 8.1 High
Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions.
CVE-2026-39547 2026-06-17 8.1 High
Unauthenticated Local File Inclusion in Getaway < 1.8 versions.
CVE-2026-28576 1 Android 1 Android 2026-06-17 N/A
In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-39548 2026-06-17 7.1 High
Unauthenticated Cross Site Scripting (XSS) in MagOne <= 9.0 versions.
CVE-2026-39549 2 Elated-themes, Wordpress 2 Aperitif, Wordpress 2026-06-17 8.1 High
Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions.
CVE-2026-39554 2026-06-17 8.1 High
Unauthenticated PHP Object Injection in Fidalgo <= 1.2.2 versions.
CVE-2026-28587 1 Google 1 Android 2026-06-17 N/A
In MmsSmsProvider of MmsSmsProvider.java, there is a possible way to retrieve sensitive information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-39557 2 Elated-themes, Wordpress 2 Neobeat, Wordpress 2026-06-17 8.1 High
Unauthenticated PHP Object Injection in NeoBeat <= 1.7 versions.
CVE-2026-39567 2026-06-17 8.1 High
Unauthenticated PHP Object Injection in Santé <= 1.5.1 versions.