Export limit exceeded: 412662 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 27), (line:1, col:28)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (412662 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-104816 1 Misskey 1 Misskey 2026-11-10 N/A
Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS components display feed item links from configured feeds without verifying their URL schemes. Missing URL scheme verification allows an attacker who controls feed content to provide an unsafe-scheme link that causes script execution when a user clicks it in an RSS widget. This issue is fixed in version 2026.7.0.
CVE-2026-104817 1 Misskey 1 Misskey 2026-11-10 N/A
Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss API lacks rate limiting and response-size restrictions and performs synchronous XML parsing. An attacker can trigger unbounded outbound HTTP requests and synchronous parsing, exhausting instance resources, amplifying requests toward third-party servers, or probing network-reachable services even when federation is disabled. This issue is fixed in version 2026.7.0.
CVE-2026-103937 1 Misskey 1 Misskey 2026-11-10 N/A
Misskey is an open source, federated social media platform. From 13.0.0 until 2025.4.1 and from 2025.5.0 until 2026.7.0, cleanup processing may not execute during file uploads. Repeated uploads can exhaust storage or file descriptors and deny service regardless of whether federation is enabled. This issue is fixed in version 2026.7.0.
CVE-2026-66822 1 Microsoft 4 .net, Microsoft Visual Studio 2022 Version 17.14, Microsoft Visual Studio 2026 Version 18.10 and 1 more 2026-11-10 5.9 Medium
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-69651 1 Microsoft 5 .net, .net Framework, Microsoft Visual Studio 2022 Version 17.14 and 2 more 2026-11-10 7.5 High
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-87697 1 Microsoft 4 .net, Microsoft Visual Studio 2022 Version 17.14, Microsoft Visual Studio 2026 Version 18.10 and 1 more 2026-11-10 8.8 High
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-70174 1 Microsoft 5 .net, .net Framework, Microsoft Visual Studio 2022 Version 17.14 and 2 more 2026-11-10 8.8 High
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-70197 1 Microsoft 19 .net, .net 10.0 Installed On Linux, .net 10.0 Installed On Mac Os and 16 more 2026-11-10 8.1 High
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-70194 1 Microsoft 4 .net, Microsoft Visual Studio 2022 Version 17.14, Microsoft Visual Studio 2026 Version 18.10 and 1 more 2026-11-10 6.5 Medium
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-96224 1 Microsoft 5 .net, .net Framework, Microsoft Visual Studio 2022 Version 17.14 and 2 more 2026-11-10 8.8 High
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-70007 1 Microsoft 5 .net, .net Framework, Microsoft Visual Studio 2022 Version 17.14 and 2 more 2026-11-10 8.8 High
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.
CVE-2026-70035 1 Microsoft 5 .net, .net Framework, Microsoft Visual Studio 2022 Version 17.14 and 2 more 2026-11-10 8.8 High
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.
CVE-2026-84008 1 Microsoft 6 .net, .net Framework, Microsoft Visual Studio 2022 Version 17.14 and 3 more 2026-11-10 7.5 High
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96231 1 Microsoft 4 .net, Microsoft Visual Studio 2022 Version 17.14, Microsoft Visual Studio 2026 Version 18.10 and 1 more 2026-11-10 7.8 High
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
CVE-2026-96225 1 Microsoft 4 .net, Microsoft Visual Studio 2022 Version 17.14, Microsoft Visual Studio 2026 Version 18.10 and 1 more 2026-11-10 7.8 High
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
CVE-2026-96229 1 Microsoft 4 .net, Microsoft Visual Studio 2022 Version 17.14, Microsoft Visual Studio 2026 Version 18.10 and 1 more 2026-11-10 6.5 Medium
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-96238 1 Microsoft 4 .net, Microsoft Visual Studio 2022 Version 17.14, Microsoft Visual Studio 2026 Version 18.10 and 1 more 2026-11-10 6.5 Medium
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-96957 3 Apple, Linux, Microsoft 8 Macos, Linux Kernel, .net and 5 more 2026-11-10 8.8 High
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-58280 1 Microsoft 5 .net, .net Framework, Microsoft Visual Studio 2022 Version 17.14 and 2 more 2026-11-10 7.5 High
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-102869 1 Microsoft 5 .net, .net Framework, Microsoft Visual Studio 2022 Version 17.14 and 2 more 2026-11-10 8.8 High
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.