Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,966 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-115995 |
critical | 9.4 | 0.0138 | 2026-10-24 | A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impac | |
CVE-2026-76932 |
critical | 9.4 | 0.0045 | 2026-10-27 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affe | |
CVE-2026-76933 |
critical | 9.4 | 0.0045 | 2026-10-27 | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affec | |
CVE-2026-76935 |
critical | 9.4 | 0.0033 | 2026-10-27 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue aff | |
CVE-2026-76936 |
critical | 9.4 | 0.0045 | 2026-10-27 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue aff | |
CVE-2026-76937 |
critical | 9.4 | 0.0045 | 2026-10-27 | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affe | |
CVE-2026-82122 |
critical | 9.4 | 0.0045 | 2026-10-27 | Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: fr | |
CVE-2026-86575 |
critical | 9.4 | 0.0045 | 2026-10-27 | Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Manage | |
CVE-2026-86576 |
critical | 9.4 | 0.0045 | 2026-10-27 | Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Managem | |
CVE-2026-86577 |
critical | 9.4 | 0.0046 | 2026-10-27 | Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - | |
CVE-2026-90465 |
critical | 9.4 | 0.0024 | 2026-10-27 | A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positio | |
CVE-2026-63190 |
critical | 9.4 | 0.0054 | 2026-10-28 | FearlessCMS is a flat-file `content` management system centered on simplicity and open source. Prior | |
CVE-2026-88092 |
critical | 9.4 | 0.0093 | 2026-10-13 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core all | |
CVE-2026-64024 |
critical | 9.4 | 0.0031 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcp_tw_i | |
CVE-2026-82104 |
critical | 9.4 | 0.0042 | 2026-10-30 | In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices runn | |
CVE-2024-26828 |
critical | 9.4 | 0.0075 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_se | |
CVE-2026-61729 |
critical | 9.4 | — | 2026-10-30 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations nee | |
CVE-2025-6519 |
critical | 9.3 | 0.0054 | 2025-09-02 | E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily gener | |
CVE-2025-58628 |
critical | 9.3 | 0.0031 | 2025-09-05 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2025-40795 |
critical | 9.3 | 0.0072 | 2025-09-09 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (Al | |
CVE-2025-40765 |
critical | 9.3 | 0.0053 | 2025-10-14 | A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3. | |
CVE-2025-40771 |
critical | 9.3 | 0.0053 | 2025-10-14 | A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4 | |
CVE-2025-48089 |
critical | 9.3 | 0.0036 | 2025-11-06 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2024-58307 |
critical | 9.3 | 0.0051 | 2025-12-11 | CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality | |
CVE-2023-53969 |
critical | 9.3 | 0.0051 | 2025-12-22 | Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allows attacker | |
CVE-2026-0625 |
critical | 9.3 | 0.0097 | 2026-01-05 | Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access control vul | |
CVE-2026-0650 |
critical | 9.3 | 0.0152 | 2026-01-07 | OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in t | |
CVE-2026-1496 |
critical | 9.3 | 0.0055 | 2026-03-27 | Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for comman | |
CVE-2026-33875 |
critical | 9.3 | 0.0027 | 2026-03-27 | Gematik Authenticator securely authenticates users for login to digital health applications. Version | |
CVE-2026-34977 |
critical | 9.3 | 0.0077 | 2026-04-06 | Aperi'Solve is an open-source steganalysis web platform. In versions 3.1.3 through 3.2.0, when uploa | |
CVE-2026-35047 |
critical | 9.3 | 0.0055 | 2026-04-06 | Brave CMS is an open-source CMS. Prior to 2.0.6, an Unrestricted File Upload vulnerability in the CK | |
CVE-2026-22679 |
critical | 9.3 | 0.2036 | 2026-04-07 | Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code exec | |
CVE-2026-39324 |
critical | 9.3 | 0.0027 | 2026-04-07 | Rack::Session is a session management implementation for Rack. From 2.0.0 to before 2.1.2, Rack::Ses | |
CVE-2026-33784 |
critical | 9.3 | 0.0046 | 2026-04-09 | A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) Virtual L | |
CVE-2026-33698 |
critical | 9.3 | 0.0032 | 2026-04-10 | Chamilo LMS is a learning management system. Prior to 1.11.38, a chained attack can enable otherwise | |
CVE-2026-40189 |
critical | 9.3 | 0.0064 | 2026-04-10 | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.4, goshs enforces the documented per- | |
CVE-2026-31845 |
critical | 9.3 | 0.0043 | 2026-04-11 | A reflected cross-site scripting (XSS) vulnerability exists in Rukovoditel CRM version 3.6.4 and ear | |
CVE-2026-4810 |
critical | 9.3 | 0.0182 | 2026-04-13 | A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit (ADK) vers | |
CVE-2026-40042 |
critical | 9.3 | 0.0037 | 2026-04-13 | Pachno 1.0.6 contains an XML external entity injection vulnerability that allows unauthenticated att | |
CVE-2026-40044 |
critical | 9.3 | 0.0048 | 2026-04-13 | Pachno 1.0.6 contains a deserialization vulnerability that allows unauthenticated attackers to execu | |
CVE-2026-27243 |
critical | 9.3 | 0.0030 | 2026-04-14 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (X | |
CVE-2026-27245 |
critical | 9.3 | 0.0030 | 2026-04-14 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (X | |
CVE-2026-27246 |
critical | 9.3 | 0.0030 | 2026-04-14 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting (X | |
CVE-2026-5387 |
critical | 9.3 | 0.0039 | 2026-04-15 | The vulnerability, if exploited, could allow an unauthenticated miscreant to perform operations inte | |
CVE-2026-40504 |
critical | 9.3 | 0.0064 | 2026-04-16 | Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec f | |
CVE-2026-6349 |
critical | 9.3 | 0.0203 | 2026-04-16 | The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticat | |
CVE-2026-6350 |
critical | 9.3 | 0.0076 | 2026-04-16 | MailGates/MailAudit developed by Openfind has a Stack-based Buffer Overflow vulnerability, allowing | |
CVE-2026-6284 |
critical | 9.3 | 0.0045 | 2026-04-17 | An attacker with network access to the PLC is able to brute force discover passwords to gain unautho | |
CVE-2026-32105 |
critical | 9.3 | 0.0017 | 2026-04-17 | xrdp is an open source RDP server. In versions through 0.10.5, xrdp does not implement verification | |
CVE-2026-40317 |
critical | 9.3 | 0.0022 | 2026-04-18 | NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0. |