Search

Expected end of text, found ':' (at char 26), (line:1, col:27)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (408068 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-107457 1 Qt 2 Qt, Qtmqtt 2026-11-02 N/A
A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash.
CVE-2026-86469 1 Redhat 5 Enterprise Linux, Hardened Images, Hummingbird and 2 more 2026-11-02 5.3 Medium
A flaw was found in GLib2. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the destination and recreates it without exclusive creation or symlink protection. A local attacker who can write to the destination directory can win that race and redirect the write to another file.
CVE-2024-7358 2 Getscreen, Point B Ltd 2 Getscreen, Getscreen Agent 2026-11-02 7.8 High
A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 3.9.5 mitigates this issue. Upgrading the affected component is advised.
CVE-2026-101181 2026-11-02 5.5 Medium
Permission control vulnerability in the WLAN module.  Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-101182 2026-11-02 5.9 Medium
Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101183 2026-11-02 5.9 Medium
UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101185 2026-11-02 5.9 Medium
OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-101186 2026-11-02 7.5 High
DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101176 2026-11-02 7.1 High
Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-101174 2026-11-02 5.7 Medium
DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-103310 2026-11-02 5.3 Medium
The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the authenticity of payment notifications when the merchant secret is unset, which is the default state, allowing unauthenticated attackers to forge a payment confirmation and mark any order as paid without payment.
CVE-2026-110975 2026-11-02 7.4 High
A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint (GET /datasources) and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration with no field-exclusion strategy. As a result, the authentication secrets stored for each configured monitoring datasource (basic-auth passwords, bearer tokens, API keys, and OAuth2 client secrets) were returned in cleartext to any client able to reach the service. An attacker with network access to Autotune could harvest these credentials and reuse them to authenticate to the backing monitoring stack.
CVE-2026-101170 2026-11-02 4 Medium
DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-18199 1 Zohocorp 2 Manageengine Pam360, Manageengine Password Manager Pro 2026-11-02 8.8 High
Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability.
CVE-2026-101172 2026-11-02 6.2 Medium
Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality.
CVE-2026-101171 2026-11-02 3.6 Low
Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
CVE-2026-101175 2026-11-02 4.3 Medium
Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101179 2026-11-02 4.7 Medium
Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101180 2026-11-02 4.3 Medium
DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101184 2026-11-02 5.5 Medium
Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.