Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,953 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-16845 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16862 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16864 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16872 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16882 |
critical | 9.8 | 0.0086 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary com | |
CVE-2026-16885 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16894 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16913 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16917 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16919 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-76886 |
critical | 9.8 | 0.0038 | 2026-08-19 | C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service | |
CVE-2026-74001 |
critical | 9.8 | 0.0061 | 2026-08-20 | Unauthenticated Broken Authentication in User Registration & Membership Pro <= 5.4.5 versions. | |
CVE-2026-15706 |
critical | 9.8 | 0.0064 | 2026-08-20 | Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry | |
CVE-2026-17000 |
critical | 9.8 | 0.0077 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17006 |
critical | 9.8 | 0.0077 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17024 |
critical | 9.8 | 0.0035 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17040 |
critical | 9.8 | 0.0080 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17118 |
critical | 9.8 | 0.0080 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17122 |
critical | 9.8 | 0.0080 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17136 |
critical | 9.8 | 0.0080 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17138 |
critical | 9.8 | 0.0067 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17141 |
critical | 9.8 | 0.0080 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17142 |
critical | 9.8 | 0.0092 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary com | |
CVE-2026-17145 |
critical | 9.8 | 0.0073 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17152 |
critical | 9.8 | 0.0080 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17157 |
critical | 9.8 | 0.0080 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17160 |
critical | 9.8 | 0.0080 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17436 |
critical | 9.8 | 0.0092 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-18832 |
critical | 9.8 | 0.0092 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-19437 |
critical | 9.8 | 0.0067 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-77647 |
critical | 9.8 | 0.0229 | 2026-08-20 | SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited i | |
CVE-2026-77264 |
critical | 9.8 | 0.0071 | 2026-08-21 | The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin fo | |
CVE-2026-66587 |
critical | 9.8 | 0.0050 | 2026-08-24 | Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions. | |
CVE-2026-32563 |
critical | 9.8 | 0.0056 | 2026-08-24 | Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 ver | |
CVE-2025-61163 |
critical | 9.8 | 0.0036 | 2026-08-26 | Cohere North AI v1.1.5 was discovered to contain excessively permissive cross-domain policy with unt | |
CVE-2025-61165 |
critical | 9.8 | 0.0045 | 2026-08-26 | An arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component of cohere North AI | |
CVE-2025-70290 |
critical | 9.8 | 0.0067 | 2026-08-26 | An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS | |
CVE-2025-70293 |
critical | 9.8 | 0.0077 | 2026-08-26 | An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in f | |
CVE-2025-67066 |
critical | 9.8 | 0.0071 | 2026-09-04 | SQL Injection vulnerability in oasys sysoa version 1.0 allows a remote attacker to execute arbitrary | |
CVE-2024-11080 |
critical | 9.8 | 0.0081 | 2026-09-05 | The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticat | |
CVE-2026-76578 |
critical | 9.8 | 0.0121 | 2026-09-07 | 1 PoC | A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does |
CVE-2025-56563 |
critical | 9.8 | 0.0058 | 2026-09-16 | A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0. | |
CVE-2025-55787 |
critical | 9.8 | 0.0047 | 2026-09-17 | In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists. | |
CVE-2026-102560 |
critical | 9.8 | 0.0042 | 2026-09-29 | A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large | |
CVE-2024-31026 |
critical | 9.8 | 0.0075 | 2026-09-29 | An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker | |
CVE-2026-104286 |
critical | 9.8 | 0.0457 | 2026-10-01 | KEV | Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL cha |
CVE-2025-70520 |
critical | 9.8 | 0.0050 | 2026-10-07 | The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authenticati | |
CVE-2026-109774 |
critical | 9.8 | 0.0034 | 2026-10-13 | Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixe | |
CVE-2026-109780 |
critical | 9.8 | 0.0036 | 2026-10-13 | Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and | |
CVE-2024-34320 |
critical | 9.8 | 0.0035 | 2026-10-13 | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in s |