Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (10248 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-66483 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.
CVE-2026-66482 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.
CVE-2026-62125 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.
CVE-2026-62124 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.
CVE-2026-62123 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.
CVE-2026-62120 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.
CVE-2026-62090 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.
CVE-2026-62087 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.
CVE-2026-62086 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Juno <= 2.25 versions.
CVE-2026-62077 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.
CVE-2026-62076 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.
CVE-2026-62054 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.
CVE-2026-62053 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.
CVE-2026-62052 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.
CVE-2026-62051 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.
CVE-2026-62050 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.
CVE-2026-42723 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.
CVE-2026-42718 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.
CVE-2026-42716 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.
CVE-2026-20321 1 Cisco 1 Application Policy Infrastructure Controller (apic) 2026-10-11 6.5 Medium
A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient input validation of user-controlled command arguments. An attacker could exploit this vulnerability by authenticating using the API and sending crafted input. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device with root-level privileges.