Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,906 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-85818 |
critical | 9.0 | 0.0041 | 2026-10-13 | Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker | |
CVE-2026-77903 |
critical | 9.0 | 0.0037 | 2026-09-17 | Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate | |
CVE-2026-103693 |
critical | 9.0 | 0.0047 | 2026-10-29 | The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 d | |
CVE-2026-90865 |
critical | 9.0 | 0.0114 | 2026-10-29 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 | |
CVE-2026-93289 |
critical | 9.0 | 0.0068 | 2026-09-24 | The affected products are vulnerable to command injection attack that could allow an unauthenticated | |
CVE-2026-118697 |
critical | 9.0 | — | 2026-10-30 | In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbr |