Export limit exceeded: 389926 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found '@' (at char 12), (line:1, col:13)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (389926 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-79963 1 Dell 1 Secure Connect Gateway 2026-09-09 7.4 High
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution.
CVE-2026-79970 1 Dell 1 Secure Connect Gateway 2026-09-09 5.6 Medium
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.
CVE-2026-79972 1 Dell 1 Secure Connect Gateway 2026-09-09 7.2 High
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
CVE-2026-80171 1 Dell 1 Secure Connect Gateway 2026-09-09 4.7 Medium
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Entropy in PRNG vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
CVE-2026-80076 1 Microsoft 8 365 Apps, Microsoft 365, Office 2019 and 5 more 2026-09-09 6.5 Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80078 1 Microsoft 8 365 Apps, Microsoft 365, Office 2019 and 5 more 2026-09-09 6.5 Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-81168 2 Captcha Protected Page Project, Drupal 2 Captcha Protected Page, Captcha Protected Page 2026-09-09 3.7 Low
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page versions: from 0.0.0 to 1.0.2.
CVE-2026-78513 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 5.5 Medium
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-78524 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-09-09 8.8 High
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-81167 2 Address Suggestion Project, Drupal 2 Address Suggestion, Address Suggestion 2026-09-09 4.8 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Address Suggestion allows Cross-Site Scripting (XSS). This issue affects Address Suggestion versions: from 0.0.0 to 1.0.25.
CVE-2026-72977 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 6.5 Medium
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-81162 2 Drupal, Dxpr Builder Project 2 Dxpr Builder: The Best Editing (ai) Experience For Drupal, Dxpr Builder 2026-09-09 5.3 Medium
Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) Experience for Drupal allows Forceful Browsing. This issue affects DXPR Builder: The Best Editing (AI) Experience for Drupal versions: from 0.0.0 to 2.8.1.
CVE-2026-72938 1 Microsoft 8 365 Apps, Microsoft 365, Office 2019 and 5 more 2026-09-09 6.5 Medium
Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-69857 1 Microsoft 2 Azure Cosmos Db, Cosmos Db 2026-09-09 8.5 High
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network.
CVE-2026-87518 2 Apple, Google 2 Iphone Os, Chrome 2026-09-09 5.3 Medium
Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87530 2 Google, Microsoft 2 Chrome, Windows 2026-09-09 8.1 High
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)
CVE-2026-87644 2 Google, Microsoft 2 Chrome, Windows 2026-09-09 8.3 High
Incorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87637 2 Apple, Google 2 Macos, Chrome 2026-09-09 9.6 Critical
Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87638 1 Google 1 Chrome 2026-09-09 9.6 Critical
Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87629 1 Google 1 Chrome 2026-09-09 6.5 Medium
Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)