Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,957 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-62015 |
critical | 9.8 | 0.0040 | 2026-10-29 | Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions. | |
CVE-2026-62016 |
critical | 9.8 | 0.0040 | 2026-10-29 | Unauthenticated PHP Object Injection in Gamic <= 1.19 versions. | |
CVE-2026-62017 |
critical | 9.8 | 0.0042 | 2026-10-29 | Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions. | |
CVE-2026-62018 |
critical | 9.8 | 0.0045 | 2026-10-29 | Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions. | |
CVE-2026-62131 |
critical | 9.8 | 0.0031 | 2026-10-29 | Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions. | |
CVE-2026-93680 |
critical | 9.8 | 0.0226 | 2026-10-29 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions |
CVE-2026-110186 |
critical | 9.8 | 0.0062 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to | |
CVE-2026-107058 |
critical | 9.8 | 0.0049 | 2026-10-29 | An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a ta | |
CVE-2026-113399 |
critical | 9.8 | 0.0049 | 2026-10-20 | Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 | |
CVE-2024-8517 |
critical | 9.8 | 0.9453 | 2024-09-06 | 2 PoC | SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and una |
CVE-2026-107249 |
critical | 9.8 | 0.0019 | 2026-10-30 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup | |
CVE-2026-103039 |
critical | 9.8 | 0.0051 | 2026-10-30 | The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, | |
CVE-2025-31704 |
critical | 9.8 | — | 2026-10-30 | A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could s | |
CVE-2024-53095 |
critical | 9.8 | 0.0056 | 2024-11-21 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free | |
CVE-2024-53177 |
critical | 9.8 | 0.0055 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due | |
CVE-2025-68745 |
critical | 9.8 | 0.0050 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after | |
CVE-2026-43125 |
critical | 9.8 | 0.0054 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_sea | |
CVE-2026-43185 |
critical | 9.8 | 0.0083 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix signededness bug in | |
CVE-2026-43414 |
critical | 9.8 | 0.0056 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Completely fix f | |
CVE-2026-63825 |
critical | 9.8 | 0.0080 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter update | |
CVE-2026-64025 |
critical | 9.8 | 0.0034 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data | |
CVE-2026-64136 |
critical | 9.8 | 0.0038 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count i | |
CVE-2026-64391 |
critical | 9.8 | 0.0046 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials f | |
CVE-2026-68381 |
critical | 9.8 | 0.0046 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async op | |
CVE-2026-68426 |
critical | 9.8 | 0.0037 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix stale skb->prev after | |
CVE-2026-72098 |
critical | 9.8 | 0.0069 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow | |
CVE-2026-72130 |
critical | 9.8 | 0.0075 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_R | |
CVE-2026-72200 |
critical | 9.8 | 0.0067 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping-pairs LCN | |
CVE-2026-72398 |
critical | 9.8 | 0.0075 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification aft | |
CVE-2026-72463 |
critical | 9.8 | 0.0044 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in | |
CVE-2026-72472 |
critical | 9.8 | 0.0065 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: nfs: use nfsi->rwsem to protect | |
CVE-2026-72494 |
critical | 9.8 | 0.0067 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue a | |
CVE-2026-74269 |
critical | 9.8 | 0.0067 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bnxt: fix head underflow on XDP | |
CVE-2026-74345 |
critical | 9.8 | 0.0044 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix endpoint/socket a | |
CVE-2026-74350 |
critical | 9.8 | 0.0065 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate fast symlink ta | |
CVE-2026-74401 |
critical | 9.8 | 0.0065 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: dlm: fix add msg handle in send | |
CVE-2026-74406 |
critical | 9.8 | 0.0049 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-d | |
CVE-2026-74611 |
critical | 9.8 | 0.0046 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: tls: rx: restore msg_iter befor | |
CVE-2026-74723 |
critical | 9.8 | 0.0067 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline exten | |
CVE-2026-80587 |
critical | 9.8 | 0.0040 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid combining some inc | |
CVE-2026-80634 |
critical | 9.8 | 0.0067 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid num | |
CVE-2026-80668 |
critical | 9.8 | 0.0067 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: | |
CVE-2026-80694 |
critical | 9.8 | 0.0046 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: pas | |
CVE-2026-80980 |
critical | 9.8 | 0.0063 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and | |
CVE-2026-89492 |
critical | 9.8 | 0.0063 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index | |
CVE-2026-89526 |
critical | 9.8 | 0.0063 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Validate Read chunk po | |
CVE-2026-89530 |
critical | 9.8 | 0.0046 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject inline replies | |
CVE-2026-89550 |
critical | 9.8 | 0.0046 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: enforce kr | |
CVE-2026-89633 |
critical | 9.8 | 0.0049 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write | |
CVE-2026-89652 |
critical | 9.8 | 0.0046 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name |