Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,957 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-89654 |
critical | 9.8 | 0.0067 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in check_new_map( | |
CVE-2026-89659 |
critical | 9.8 | 0.0044 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after- | |
CVE-2026-89676 |
critical | 9.8 | 0.0046 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s_cp_stateids | |
CVE-2026-89686 |
critical | 9.8 | 0.0066 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUG_ON in nfsd4_alloc | |
CVE-2026-89702 |
critical | 9.8 | 0.0046 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: nfsd: size fh_verify server soc | |
CVE-2026-89788 |
critical | 9.8 | 0.0065 | 2026-09-16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix tree connection use- | |
CVE-2026-89972 |
critical | 9.8 | 0.0063 | 2026-09-16 | In the Linux kernel, the following vulnerability has been resolved: nvme: add missing SRCU grace pe | |
CVE-2026-90037 |
critical | 9.8 | 0.0048 | 2026-09-16 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after- | |
CVE-2026-90048 |
critical | 9.8 | 0.0067 | 2026-09-16 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix slab-out-of-bound | |
CVE-2026-90104 |
critical | 9.8 | 0.0063 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: zero referring call li | |
CVE-2026-90235 |
critical | 9.8 | 0.0062 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: xprtsock: annotate shar | |
CVE-2026-91214 |
critical | 9.8 | 0.0045 | 2026-10-20 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). | |
CVE-2026-91233 |
critical | 9.8 | 0.0045 | 2026-10-20 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Sch | |
CVE-2026-91234 |
critical | 9.8 | 0.0045 | 2026-10-20 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). | |
CVE-2026-91235 |
critical | 9.8 | 0.0045 | 2026-10-20 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). | |
CVE-2026-91236 |
critical | 9.8 | 0.0045 | 2026-10-20 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). | |
CVE-2026-110799 |
critical | 9.8 | — | 2026-10-30 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stor | |
CVE-2026-61737 |
critical | 9.8 | — | 2026-10-30 | ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded de | |
CVE-2026-108771 |
critical | 9.8 | 0.0021 | 2026-10-19 | Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apach | |
CVE-2026-63912 |
critical | 9.8 | 0.0071 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: restore combined sin | |
CVE-2025-13204 |
critical | 9.8 | 0.0048 | 2025-11-14 | npm package `expr-eval` is vulnerable to Prototype Pollution. An attacker with access to express eva | |
CVE-2026-116386 |
critical | 9.8 | — | 2026-10-30 | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions. | |
CVE-2026-119526 |
critical | 9.8 | — | 2026-10-30 | Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. Th | |
CVE-2026-39738 |
critical | 9.8 | — | 2026-10-30 | Unauthenticated PHP Object Injection in FunnelKit Automations <= 3.8.6.1 versions. | |
CVE-2026-90888 |
critical | 9.8 | — | 2026-10-30 | Unauthenticated PHP Object Injection in LeadSnap <= 1.25 versions. | |
CVE-2026-61620 |
critical | 9.8 | — | 2026-10-30 | HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass u | |
CVE-2026-69493 |
critical | 9.8 | 0.0097 | 2026-09-08 | Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code | |
CVE-2026-69586 |
critical | 9.8 | 0.0097 | 2026-09-08 | Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute c | |
CVE-2026-69590 |
critical | 9.8 | 0.0097 | 2026-09-08 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an | |
CVE-2026-69595 |
critical | 9.8 | 0.0097 | 2026-09-08 | Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to exec | |
CVE-2026-69715 |
critical | 9.8 | 0.0097 | 2026-09-08 | Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a net | |
CVE-2026-69768 |
critical | 9.8 | 0.0097 | 2026-09-08 | Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a n | |
CVE-2026-69769 |
critical | 9.8 | 0.0097 | 2026-09-08 | Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute | |
CVE-2026-69824 |
critical | 9.8 | 0.0097 | 2026-09-08 | Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to | |
CVE-2026-69829 |
critical | 9.8 | 0.0097 | 2026-09-08 | Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a n | |
CVE-2026-69845 |
critical | 9.8 | 0.0102 | 2026-09-08 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov | |
CVE-2026-69910 |
critical | 9.8 | 0.0097 | 2026-09-08 | Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over | |
CVE-2026-70296 |
critical | 9.8 | 0.0097 | 2026-09-08 | Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code ove | |
CVE-2026-73009 |
critical | 9.8 | 0.0097 | 2026-09-08 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to | |
CVE-2026-73010 |
critical | 9.8 | 0.0097 | 2026-09-08 | Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a ne | |
CVE-2026-73025 |
critical | 9.8 | 0.0090 | 2026-09-08 | Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature ov | |
CVE-2026-78445 |
critical | 9.8 | 0.0097 | 2026-09-08 | Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to exec | |
CVE-2026-67643 |
critical | 9.8 | 0.0097 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a netw | |
CVE-2026-68839 |
critical | 9.8 | 0.0102 | 2026-09-08 | Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker | |
CVE-2026-69276 |
critical | 9.8 | 0.0097 | 2026-09-08 | Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthor | |
CVE-2026-69408 |
critical | 9.8 | 0.0097 | 2026-09-08 | Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker | |
CVE-2026-69431 |
critical | 9.8 | 0.0097 | 2026-09-08 | Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a n | |
CVE-2026-69463 |
critical | 9.8 | 0.0097 | 2026-09-08 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a ne | |
CVE-2026-69491 |
critical | 9.8 | 0.0097 | 2026-09-08 | Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execu | |
CVE-2026-69496 |
critical | 9.8 | 0.0097 | 2026-09-08 | Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute c |