Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,740 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-15747 |
critical | 9.1 | 0.0025 | 2026-07-14 | Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CS | |
CVE-2026-53486 |
critical | 9.1 | 0.0075 | 2026-07-14 | The decompress package for Node.js extracts archives. Prior to 10.2.1 and 11.1.3, archive extraction | |
CVE-2026-45363 |
critical | 9.1 | 0.0036 | 2026-07-14 | ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard. Prior to 2.10.3 and | |
CVE-2026-57073 |
critical | 9.1 | 0.0065 | 2026-07-16 | HTML::Bare versions through 0.04 for Perl have an unbounded character lookahead. The parserc_parse | |
CVE-2026-57074 |
critical | 9.1 | 0.0063 | 2026-07-16 | XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parserc_parse f | |
CVE-2026-57075 |
critical | 9.1 | 0.0063 | 2026-07-16 | YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table | |
CVE-2026-62232 |
critical | 9.1 | 0.0035 | 2026-07-17 | Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in the login plugin wher | |
CVE-2026-12694 |
critical | 9.1 | 0.0044 | 2026-07-17 | Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Func | |
CVE-2026-52199 |
critical | 9.1 | 0.0066 | 2026-07-17 | An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrar | |
CVE-2026-41521 |
critical | 9.1 | 0.0067 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerabili | |
CVE-2026-62414 |
critical | 9.1 | 0.0040 | 2026-07-20 | Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla ext | |
CVE-2026-62415 |
critical | 9.1 | 0.0045 | 2026-07-21 | Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2 - The Jo | |
CVE-2026-64609 |
critical | 9.1 | 0.0078 | 2026-07-21 | Out-of-bounds read via sun.misc.Unsafe in Apache Fory. When out-of-band zero-copy deserialization is | |
CVE-2026-16359 |
critical | 9.1 | 0.0047 | 2026-07-21 | Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Fir | |
CVE-2026-16364 |
critical | 9.1 | 0.0043 | 2026-07-21 | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed i | |
CVE-2026-16370 |
critical | 9.1 | 0.0043 | 2026-07-21 | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and | |
CVE-2026-16380 |
critical | 9.1 | 0.0043 | 2026-07-21 | Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thund | |
CVE-2026-16381 |
critical | 9.1 | 0.0023 | 2026-07-21 | Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox | |
CVE-2026-16390 |
critical | 9.1 | 0.0044 | 2026-07-21 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, | |
CVE-2026-16392 |
critical | 9.1 | 0.0053 | 2026-07-21 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox | |
CVE-2026-16393 |
critical | 9.1 | 0.0054 | 2026-07-21 | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Fir | |
CVE-2026-16394 |
critical | 9.1 | 0.0043 | 2026-07-21 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Th | |
CVE-2026-16406 |
critical | 9.1 | 0.0043 | 2026-07-21 | Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thund | |
CVE-2026-59139 |
critical | 9.1 | 0.0054 | 2026-07-21 | Data::ReqRep::Shared versions before 0.05 for Perl allow an out-of-bounds read via an unvalidated ar | |
CVE-2026-59140 |
critical | 9.1 | 0.0054 | 2026-07-21 | Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated no | |
CVE-2026-59141 |
critical | 9.1 | 0.0054 | 2026-07-21 | Data::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated no | |
CVE-2026-59142 |
critical | 9.1 | 0.0054 | 2026-07-21 | Data::HashMap::Shared versions before 0.14 for Perl allow an out-of-bounds read via an unvalidated a | |
CVE-2026-59145 |
critical | 9.1 | 0.0054 | 2026-07-21 | Data::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated slot, | |
CVE-2026-47040 |
critical | 9.1 | 0.0049 | 2026-07-21 | Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions th | |
CVE-2026-47731 |
critical | 9.1 | 0.0089 | 2026-07-21 | The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instruments for Surface and Space (BLISS | |
CVE-2026-60168 |
critical | 9.1 | 0.0045 | 2026-07-21 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (c | |
CVE-2026-60208 |
critical | 9.1 | 0.0045 | 2026-07-21 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | |
CVE-2026-60267 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60326 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic | |
CVE-2026-60438 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_ssl). S | |
CVE-2026-60567 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg | |
CVE-2026-60606 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSof | |
CVE-2026-60649 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Co | |
CVE-2026-61059 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (compon | |
CVE-2026-61130 |
critical | 9.1 | 0.0049 | 2026-07-21 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Applicat | |
CVE-2026-61153 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-61155 |
critical | 9.1 | 0.0049 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com | |
CVE-2026-61156 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com | |
CVE-2026-61171 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The su | |
CVE-2026-61184 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-61197 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg | |
CVE-2026-61238 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft | |
CVE-2026-61244 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Argentina product of Oracle PeopleSoft | |
CVE-2026-64829 |
critical | 9.1 | 0.0042 | 2026-07-22 | Question2Answer through 1.8.8 contains a session invalidation vulnerability that allows attackers wi | |
CVE-2026-64793 |
critical | 9.1 | 0.0043 | 2026-07-22 | Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and |