Export limit exceeded: 384504 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found 'èmes' (at char 20), (line:1, col:21)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (384504 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-19715 2026-08-27 7.5 High
The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.3.1 does not restrict access to the debug log it writes, which is stored at a fixed and publicly reachable location, allowing unauthenticated users to read the OAuth tokens and authorisation codes it has issued as well as user records including password hashes when debug logging is enabled.
CVE-2021-48005 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2021-48004 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2021-48003 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2021-48002 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2021-48001 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2021-48000 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2021-47999 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2021-47998 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2021-47997 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2022-51007 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2022-51006 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2022-51005 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2022-51004 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2022-51003 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2022-51002 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2022-51001 2026-08-27 N/A
This CVE ID has been rejected.
CVE-2026-75871 1 Gitlab 1 Ai-gateway 2026-08-27 8.2 High
GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an authenticated user with Duo Agent Platform access to redirect outbound model requests to an externally-controlled endpoint via a crafted inline flow configuration that overrides the HTTP Host header, resulting in disclosure of Google Cloud Vertex cloud service credentials and private signing keys.
CVE-2026-19889 1 Gitlab 1 Ai-gateway 2026-08-27 8.2 High
GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.9.0 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an authenticated user with Duo Agent Platform access to redirect model requests to an externally-controlled endpoint via crafted model metadata, resulting in the disclosure of Google Vertex AI or AWS Bedrock cloud service credentials.
CVE-2026-13415 2026-08-27 7.2 High
The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing settings via one of its AJAX actions, allowing users with the Editor role (when the administrator has granted the Editor role access to the CMP WordPress plugin before 4.1.18's admin-bar controls) to update arbitrary WordPress options, including options that lead to privilege escalation to Administrator.