Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,953 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-105010 |
critical | 9.8 | 0.0099 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate priv | |
CVE-2026-105016 |
critical | 9.8 | 0.0166 | 2026-10-13 | Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a | |
CVE-2026-69634 |
critical | 9.8 | 0.0095 | 2026-10-13 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a n | |
CVE-2026-69639 |
critical | 9.8 | 0.0095 | 2026-10-13 | Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code ove | |
CVE-2026-70147 |
critical | 9.8 | 0.0107 | 2026-10-13 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to | |
CVE-2026-70153 |
critical | 9.8 | 0.0107 | 2026-10-13 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to | |
CVE-2026-70157 |
critical | 9.8 | 0.0106 | 2026-10-13 | Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to | |
CVE-2026-85928 |
critical | 9.8 | 0.0063 | 2026-10-13 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacke | |
CVE-2026-96864 |
critical | 9.8 | 0.0063 | 2026-10-13 | Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute | |
CVE-2026-104252 |
critical | 9.8 | 0.0117 | 2026-10-13 | Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, | |
CVE-2026-98432 |
critical | 9.8 | 0.0044 | 2026-10-15 | 9 PoC | In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_op |
CVE-2026-109219 |
critical | 9.8 | 0.0069 | 2026-10-16 | The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in version 2.4.4 via the | |
CVE-2026-98490 |
critical | 9.8 | 0.0062 | 2026-10-18 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fi | |
CVE-2026-98548 |
critical | 9.8 | 0.0069 | 2026-10-18 | In the Linux kernel, the following vulnerability has been resolved: sctp: discard the rest of the p | |
CVE-2026-107081 |
critical | 9.8 | 0.0049 | 2026-10-19 | SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJA | |
CVE-2026-12665 |
critical | 9.8 | 0.0032 | 2026-10-19 | IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when p | |
CVE-2026-101484 |
critical | 9.8 | 0.0054 | 2026-10-20 | Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are | |
CVE-2026-101521 |
critical | 9.8 | 0.0058 | 2026-10-20 | Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1.0- | |
CVE-2026-91323 |
critical | 9.8 | 0.0050 | 2026-10-20 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | |
CVE-2026-91491 |
critical | 9.8 | 0.0035 | 2026-10-20 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen | |
CVE-2026-91665 |
critical | 9.8 | 0.0047 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 2 | |
CVE-2026-92559 |
critical | 9.8 | 0.0053 | 2026-10-20 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensiti | |
CVE-2026-58663 |
critical | 9.8 | 0.0028 | 2026-10-21 | An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue aff | |
CVE-2026-59562 |
critical | 9.8 | 0.0028 | 2026-10-21 | Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Ap | |
CVE-2026-76466 |
critical | 9.8 | 0.0042 | 2026-10-21 | A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenti | |
CVE-2026-76473 |
critical | 9.8 | 0.0049 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams f | |
CVE-2026-76474 |
critical | 9.8 | 0.0047 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams f | |
CVE-2026-111183 |
critical | 9.8 | 0.0070 | 2026-10-21 | GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabi | |
CVE-2026-96639 |
critical | 9.8 | 0.0066 | 2026-10-21 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an Imag | |
CVE-2026-76301 |
critical | 9.8 | 0.0038 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted | |
CVE-2026-76408 |
critical | 9.8 | 0.0017 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted | |
CVE-2026-76527 |
critical | 9.8 | 0.0043 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted | |
CVE-2026-76529 |
critical | 9.8 | 0.0017 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted | |
CVE-2026-112241 |
critical | 9.8 | 0.0046 | 2026-10-22 | Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows Authent | |
CVE-2026-112832 |
critical | 9.8 | 0.0044 | 2026-10-22 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-78846 |
critical | 9.8 | 0.0045 | 2026-10-22 | Multiple AiDot devices are vulnerable to a heap-based buffer overflow via SSDP location header parsi | |
CVE-2026-79852 |
critical | 9.8 | 0.0064 | 2026-10-22 | A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote a | |
CVE-2026-79853 |
critical | 9.8 | 0.0070 | 2026-10-22 | Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an | |
CVE-2026-79854 |
critical | 9.8 | 0.0064 | 2026-10-22 | A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker t | |
CVE-2026-79855 |
critical | 9.8 | 0.0075 | 2026-10-22 | An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote a | |
CVE-2026-79856 |
critical | 9.8 | 0.0061 | 2026-10-22 | A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthentic | |
CVE-2026-79857 |
critical | 9.8 | 0.0141 | 2026-10-22 | There is a command injection vulnerability in the PAPI protocol (Aruba's access point management pro | |
CVE-2026-79858 |
critical | 9.8 | 0.0051 | 2026-10-22 | An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful expl | |
CVE-2026-79859 |
critical | 9.8 | 0.0069 | 2026-10-22 | Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthen | |
CVE-2026-79860 |
critical | 9.8 | 0.0074 | 2026-10-22 | Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthent | |
CVE-2026-79861 |
critical | 9.8 | 0.0156 | 2026-10-22 | There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code | |
CVE-2026-63244 |
critical | 9.8 | 0.0066 | 2026-10-23 | An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) co | |
CVE-2026-112862 |
critical | 9.8 | 0.0041 | 2026-10-23 | Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants | |
CVE-2026-112846 |
critical | 9.8 | 0.0031 | 2026-10-23 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object | |
CVE-2026-112847 |
critical | 9.8 | 0.0031 | 2026-10-23 | Deserialization of Untrusted Data vulnerability in ThemeREX ZenSoul zensoul allows Object Injection. |