Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,883 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-65879 |
critical | 9.8 | 0.0051 | 2026-07-27 | Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret | |
CVE-2026-63077 |
critical | 9.8 | 0.9356 | 2026-07-27 | KEV | JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unaut |
CVE-2026-28911 |
critical | 9.8 | 0.0050 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, m | |
CVE-2026-28982 |
critical | 9.8 | 0.0056 | 2026-07-27 | A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.7.8, m | |
CVE-2026-39873 |
critical | 9.8 | 0.0059 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-43682 |
critical | 9.8 | 0.0072 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-43694 |
critical | 9.8 | 0.0059 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-43710 |
critical | 9.8 | 0.0059 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-43748 |
critical | 9.8 | 0.0059 | 2026-07-27 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS | |
CVE-2026-43750 |
critical | 9.8 | 0.0077 | 2026-07-27 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia | |
CVE-2026-43757 |
critical | 9.8 | 0.0060 | 2026-07-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 | |
CVE-2026-43764 |
critical | 9.8 | 0.0059 | 2026-07-27 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequo | |
CVE-2026-43773 |
critical | 9.8 | 0.0059 | 2026-07-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequ | |
CVE-2026-43779 |
critical | 9.8 | 0.0054 | 2026-07-27 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-43793 |
critical | 9.8 | 0.0059 | 2026-07-27 | An issue existed in the handling of environment variables. This issue was addressed with improved va | |
CVE-2026-43802 |
critical | 9.8 | 0.0060 | 2026-07-27 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS | |
CVE-2026-43809 |
critical | 9.8 | 0.0060 | 2026-07-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 | |
CVE-2026-64691 |
critical | 9.8 | 0.0047 | 2026-07-27 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26 | |
CVE-2026-64694 |
critical | 9.8 | 0.0059 | 2026-07-27 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequo | |
CVE-2026-64695 |
critical | 9.8 | 0.0073 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS | |
CVE-2026-64696 |
critical | 9.8 | 0.0072 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-64697 |
critical | 9.8 | 0.0059 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-64698 |
critical | 9.8 | 0.0059 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-64702 |
critical | 9.8 | 0.0054 | 2026-07-27 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Seq | |
CVE-2026-64703 |
critical | 9.8 | 0.0057 | 2026-07-27 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS S | |
CVE-2026-64704 |
critical | 9.8 | 0.0059 | 2026-07-27 | A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Seq | |
CVE-2026-64731 |
critical | 9.8 | 0.0061 | 2026-07-27 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 1 | |
CVE-2026-64738 |
critical | 9.8 | 0.0056 | 2026-07-27 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.10 a | |
CVE-2026-64767 |
critical | 9.8 | 0.0089 | 2026-07-27 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia | |
CVE-2026-66713 |
critical | 9.8 | 0.0172 | 2026-07-28 | Deserialization of Untrusted Data (CWE-502) in the Tribes-based clustering component in Apache So | |
CVE-2026-16184 |
critical | 9.8 | 0.0047 | 2026-07-28 | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication | |
CVE-2026-14446 |
critical | 9.8 | 0.0053 | 2026-07-28 | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escal | |
CVE-2026-14512 |
critical | 9.8 | 0.0097 | 2026-07-28 | IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe | |
CVE-2026-14974 |
critical | 9.8 | 0.0068 | 2026-07-28 | IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute a | |
CVE-2026-14976 |
critical | 9.8 | 0.0061 | 2026-07-28 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code exec | |
CVE-2026-59243 |
critical | 9.8 | 0.0064 | 2026-07-29 | The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` when decoding the ID | |
CVE-2026-48449 |
critical | 9.8 | 0.0086 | 2026-07-30 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could resu | |
CVE-2026-14522 |
critical | 9.8 | 0.0102 | 2026-07-30 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a | |
CVE-2026-15435 |
critical | 9.8 | 0.0073 | 2026-07-30 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a | |
CVE-2026-28323 |
critical | 9.8 | 0.0103 | 2026-07-30 | SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This | |
CVE-2026-28812 |
critical | 9.8 | 0.0069 | 2026-07-30 | UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attac | |
CVE-2026-4978 |
critical | 9.8 | 0.0047 | 2026-07-30 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability i | |
CVE-2026-52680 |
critical | 9.8 | 0.0111 | 2026-07-30 | Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when | |
CVE-2026-12940 |
critical | 9.8 | 0.0094 | 2026-07-30 | IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via e | |
CVE-2026-12118 |
critical | 9.8 | 0.0085 | 2026-07-30 | IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to | |
CVE-2026-68502 |
critical | 9.8 | 0.0097 | 2026-07-30 | LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.15 | |
CVE-2026-68503 |
critical | 9.8 | 0.0075 | 2026-07-30 | LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.15 | |
CVE-2026-38709 |
critical | 9.8 | 0.0275 | 2026-07-30 | TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR300 | |
CVE-2026-17561 |
critical | 9.8 | 0.0056 | 2026-07-31 | Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecom | |
CVE-2026-16504 |
critical | 9.8 | 0.0048 | 2026-07-31 | Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a de |