Search

Expected end of text, found ':' (at char 24), (line:1, col:25)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (424018 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-117708 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117707 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117706 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117705 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117704 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117703 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117702 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117701 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117700 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117699 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117698 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117697 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117696 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117695 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117694 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117693 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117692 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-118008 1 Mozilla 1 Firefox 2026-10-28 8.8 High
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-114730 1 Roundcube 1 Webmail 2026-10-28 7.2 High
Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass. The network blocklist used by rcube_utils::is_local_url() omitted the RFC 6052 NAT64 prefix 64:ff9b::/96, the RFC 8215 local-use NAT64 prefix 64:ff9b:1::/48 and the unspecified address ::/128, so URLs such as http://[64:ff9b::7f00:1]/ passed the filter and reached loopback, link-local and cloud metadata addresses. Upstream fixed this in the commit “Fix SSRF filter (is_local_url()) bypass via NAT64 64:ff9b::/96”.
CVE-2026-114726 1 Roundcube 1 Webmail 2026-10-28 5.8 Medium
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce (resend) action. rcube_mime::decode_address_list() did not strip control characters from the decoded display name, so a received message whose From display-name carries CRLF sequences in an encoded word could inject arbitrary headers into the message emitted when the user bounces it. Upstream fixed this in the commit “Fix mail header injection via the From display-name in the Bounce (resend) action”.