Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,870 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-61174 |
critical | 9.0 | 0.0019 | 2026-07-21 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: I | |
CVE-2026-61201 |
critical | 9.0 | 0.0039 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (componen | |
CVE-2026-61223 |
critical | 9.0 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communicat | |
CVE-2026-16723 |
critical | 9.0 | 0.0066 | 2026-07-23 | A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerabi | |
CVE-2026-20267 |
critical | 9.0 | 0.0038 | 2026-08-05 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE So | |
CVE-2026-71851 |
critical | 9.0 | 0.0055 | 2026-08-07 | crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate | |
CVE-2026-48381 |
critical | 9.0 | 0.0078 | 2026-08-11 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in a | |
CVE-2026-18691 |
critical | 9.0 | 0.0036 | 2026-08-11 | An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable networ | |
CVE-2026-73487 |
critical | 9.0 | 0.0096 | 2026-08-13 | Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent n | |
CVE-2026-61029 |
critical | 9.0 | 0.0039 | 2026-08-18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-70980 |
critical | 9.0 | 0.0039 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-92892 |
critical | 9.0 | 0.0034 | 2026-10-13 | Potential arbitrary code execution under specific configurations. Updated October 22, 2026: Affected | |
CVE-2026-105008 |
critical | 9.0 | 0.0066 | 2026-10-13 | No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a | |
CVE-2026-20043 |
critical | 9.0 | 0.0036 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Ope | |
CVE-2026-94267 |
critical | 9.0 | 0.0039 | 2026-10-23 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extend | |
CVE-2025-30046 |
critical | 9.0 | 0.0026 | 2026-10-23 | In the CGM CLININET application server, multiple processes responsible for HL7 communication with ex | |
CVE-2026-85818 |
critical | 9.0 | 0.0041 | 2026-10-13 | Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker | |
CVE-2026-77903 |
critical | 9.0 | 0.0037 | 2026-09-17 | Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate | |
CVE-2026-103693 |
critical | 9.0 | 0.0047 | 2026-10-29 | The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 d | |
CVE-2026-90865 |
critical | 9.0 | 0.0114 | 2026-10-29 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 |