Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,966 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-54836 |
critical | 9.3 | 0.0134 | 2026-06-25 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-54843 |
critical | 9.3 | 0.0040 | 2026-06-25 | Unauthenticated SQL Injection in MDTF <= 1.3.7 versions. | |
CVE-2026-54849 |
critical | 9.3 | 0.0040 | 2026-06-25 | Unauthenticated SQL Injection in Premmerce Wishlist for WooCommerce <= 1.1.11 versions. | |
CVE-2026-54030 |
critical | 9.3 | 0.0017 | 2026-06-25 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.5, LibreCha | |
CVE-2026-56786 |
critical | 9.3 | 0.0071 | 2026-06-25 | RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode_type1033 function that | |
CVE-2026-40702 |
critical | 9.3 | 0.0065 | 2026-06-25 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate chargin | |
CVE-2026-54820 |
critical | 9.3 | 0.0040 | 2026-06-26 | Unauthenticated SQL Injection in JetBooking <= 4.0.4.1 versions. | |
CVE-2026-54827 |
critical | 9.3 | 0.0040 | 2026-06-26 | Unauthenticated SQL Injection in Real Estate 7 <= 3.5.9 versions. | |
CVE-2026-54831 |
critical | 9.3 | 0.0040 | 2026-06-26 | Unauthenticated SQL Injection in GeoDirectory <= 2.8.162 versions. | |
CVE-2026-56034 |
critical | 9.3 | 0.0040 | 2026-06-26 | Unauthenticated SQL Injection in Library Management System <= 3.5.7 versions. | |
CVE-2026-56036 |
critical | 9.3 | 0.0040 | 2026-06-26 | Unauthenticated SQL Injection in 워드프레스 결제 심플페이 <= 5.5.6 versions. | |
CVE-2026-56062 |
critical | 9.3 | 0.0144 | 2026-06-26 | Unauthenticated SQL Injection in Quotes llama <= 3.1.5 versions. | |
CVE-2026-56067 |
critical | 9.3 | 0.0045 | 2026-06-26 | Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions. | |
CVE-2026-56068 |
critical | 9.3 | 0.0040 | 2026-06-26 | Unauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions. | |
CVE-2026-56070 |
critical | 9.3 | 0.0144 | 2026-06-26 | Unauthenticated SQL Injection in Advance Product Search <= 1.4.4 versions. | |
CVE-2026-11720 |
critical | 9.3 | 0.0053 | 2026-06-29 | A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When | |
CVE-2026-56782 |
critical | 9.3 | 0.0356 | 2026-06-29 | Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restor | |
CVE-2026-12818 |
critical | 9.3 | 0.0043 | 2026-06-30 | Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits | |
CVE-2026-12819 |
critical | 9.3 | 0.0054 | 2026-06-30 | Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authenticat | |
CVE-2026-14162 |
critical | 9.3 | 0.0063 | 2026-06-30 | Hospital Queuing Management developed by Advantech has a Sensitive Data Exposure vulnerability, allo | |
CVE-2026-53690 |
critical | 9.3 | 0.0051 | 2026-06-30 | An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in t | |
CVE-2026-58116 |
critical | 9.3 | 0.0090 | 2026-06-30 | LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers wit | |
CVE-2026-48313 |
critical | 9.3 | 0.0295 | 2026-06-30 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname | |
CVE-2026-48315 |
critical | 9.3 | 0.0103 | 2026-06-30 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnera | |
CVE-2026-58172 |
critical | 9.3 | 0.0056 | 2026-06-30 | Ocelot through 24.1.0, fixed in commit f156fd4, contains a security control bypass vulnerability tha | |
CVE-2026-58138 |
critical | 9.3 | 0.0914 | 2026-06-30 | Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerabilit | |
CVE-2026-11708 |
critical | 9.3 | 0.0038 | 2026-06-30 | IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in | |
CVE-2026-11712 |
critical | 9.3 | 0.0038 | 2026-06-30 | IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in | |
CVE-2026-50003 |
critical | 9.3 | 0.0066 | 2026-06-30 | A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode wr | |
CVE-2026-58449 |
critical | 9.3 | 0.0135 | 2026-06-30 | txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body | |
CVE-2026-14038 |
critical | 9.3 | 0.0033 | 2026-06-30 | Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 150.0.7871.47 a | |
CVE-2026-7840 |
critical | 9.3 | 0.0263 | 2026-07-01 | UltraVNC repeater through 1.8.2.2 contains a global buffer overflow in its embedded HTTP administrat | |
CVE-2026-57517 |
critical | 9.3 | 0.0096 | 2026-07-01 | Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthe | |
CVE-2026-58126 |
critical | 9.3 | 0.0184 | 2026-07-01 | PACSgear PACS Scan 5.2.1 contains an unauthenticated remote code execution vulnerability that allows | |
CVE-2026-58127 |
critical | 9.3 | 0.0188 | 2026-07-01 | PACSgear MediaWriter 5.2.1 exposes a .NET Remoting TCP service on port 9000 via PacsgearMediaServerE | |
CVE-2026-34099 |
critical | 9.3 | 0.0063 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in job_i | |
CVE-2026-34106 |
critical | 9.3 | 0.0093 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in subtitles.ph | |
CVE-2026-34107 |
critical | 9.3 | 0.0093 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate.ph | |
CVE-2026-34108 |
critical | 9.3 | 0.0093 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in text.php (li | |
CVE-2026-34109 |
critical | 9.3 | 0.0093 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech.php ( | |
CVE-2026-34110 |
critical | 9.3 | 0.0093 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in complex_star | |
CVE-2026-34111 |
critical | 9.3 | 0.0093 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmac_te | |
CVE-2026-34112 |
critical | 9.3 | 0.0093 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmac.ph | |
CVE-2026-34113 |
critical | 9.3 | 0.0093 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech_text. | |
CVE-2026-34114 |
critical | 9.3 | 0.0093 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate_te | |
CVE-2026-34115 |
critical | 9.3 | 0.0093 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in transcribe_a | |
CVE-2026-34116 |
critical | 9.3 | 0.0093 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in transcribe.p | |
CVE-2026-34117 |
critical | 9.3 | 0.0093 | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in text_to_subt | |
CVE-2026-58453 |
critical | 9.3 | 0.0190 | 2026-07-01 | JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credential | |
CVE-2026-58457 |
critical | 9.3 | 0.0294 | 2026-07-01 | Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command inj |