Vulnerability search
Batch lookup →2,144,530 matches
- CVE-2026-72898Metabase Metabase — Metabase SQL Injection Vulnerability2 sources· cvecriticalKEVPoCEPSS 94%239.910.099.8%2026-08-11 00:00 UTC
- CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in — Oracle HTTP Server and Oracle…3 sources· cve · oracle_cpucriticalKEVPoCEPSS 42%239.210.098.6%2026-08-24 00:00 UTC
- CVE-2026-31431Kernel Live Patch Security Notice33 sources· ubuntu_usn · debian_dsacriticalKEVPoCEPSS 100%239.09.8100.0%2026-08-27 10:07 UTC
- CVE-2026-60004Gitea Gitea — Gitea Code Injection Vulnerability3 sources· osv_advisory · cvecriticalKEVPoCEPSS 87%238.89.899.7%2026-08-28 14:42 UTC
- CVE-2026-42208LiteLLM has SQL Injection in Proxy API key verification2 sources· osv_advisorycriticalKEVPoCEPSS 89%238.89.899.8%2026-06-29 11:50 UTC
- CVE-2026-9082Drupal core - Highly critical - SQL injection - SA-CORE-2026-0044 sources· osv_advisory · cvecriticalKEVPoCEPSS 88%238.89.899.8%2026-05-29 08:41 UTC
- CVE-2023-49105ownCloud ownCloud — ownCloud Improper Authentication VulnerabilitycriticalKEVPoCEPSS 43%238.29.898.6%2026-08-27 00:00 UTC
- CVE-2026-33017Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint2 sources· osv_advisorycriticalKEVPoCEPSS 96%236.40.099.9%2026-06-29 11:50 UTC
- CVE-2026-39987Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass3 sources· osv_advisory · cvecriticalKEVPoCEPSS 99%236.40.099.9%2026-06-29 11:50 UTC
- CVE-2026-65400Apple macOS — Apple macOS Improper Authentication Vulnerability2 sources· cvecriticalKEVPoCEPSS 9.9%236.19.895.3%2026-08-18 00:00 UTC
- CVE-2026-63030WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code…2 sources· osv_advisorycriticalKEVPoCEPSS 97%236.09.899.9%2026-07-27 05:55 UTC
- CVE-2026-82329JFrog Artifactory — JFrog Artifactory Improper Authentication Vulnerability2 sources· cvecriticalKEVPoCEPSS 7.7%235.59.894.2%2026-08-28 20:20 UTC
- CVE-2026-15409A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance…criticalRansomwareKEVPoCEPSS 84%235.510.099.7%2026-07-14 19:39 UTC
- CVE-2026-50522Security Advisory 2026-009 — Critical Vulnerabilities in Microsoft SharePointcriticalKEVPoCEPSS 85%235.09.899.7%2026-07-23 00:00 UTC
- CVE-2026-19490Citrix NetScaler — Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel…3 sources· cve · certeu_advisorycriticalKEVPoCEPSS 6%234.79.892.9%2026-08-19 13:17 UTC
- CVE-2026-64849MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via…5 sources· osv_advisory · cvecriticalKEVPoCEPSS 16%234.69.396.8%2026-08-21 05:51 UTC
- CVE-2026-10520June 2026 Security Update3 sources· ivanti_advisory · cve · certeu_advisorycriticalKEVPoCEPSS 100%234.010.0100.0%2026-06-10 00:00 UTC
- CVE-2023-4863libwebp: OOB write in BuildHuffmanTablecriticalKEVPoCEPSS 100%234.08.8100.0%2026-07-07 11:45 UTC
- CVE-2026-42271LiteLLM: Authenticated command execution via MCP stdio test endpoints2 sources· osv_advisorycriticalKEVPoCEPSS 84%233.78.899.7%2026-07-13 15:02 UTC
- CVE-2026-48282Adobe Security Bulletin APSB26-68 — ColdfusioncriticalKEVPoCEPSS 42%233.710.098.6%2026-06-30 16:16 UTC
- CVE-2026-73570Synacor Zimbra Collaboration Suite (ZCS) — Zimbra Collaboration Suite (ZCS) OS Command Injection…2 sources· cvecriticalKEVPoCEPSS 32%233.48.998.2%2026-08-21 00:00 UTC
- CVE-2019-1068Microsoft SQL Server — Microsoft SQL Server Remote Code Execution VulnerabilitycriticalKEVPoCEPSS 53%233.38.898.9%2026-08-26 00:00 UTC
- CVE-2025-3248Langflow Unauth RCEcriticalRansomwareKEVPoCEPSS 100%232.99.8100.0%2026-06-29 11:50 UTC
- CVE-2026-50751A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1…criticalRansomwareKEVPoCEPSS 84%231.69.399.7%2026-06-08 11:07 UTC
- CVE-2026-46242Linux kernel (GCP) vulnerabilities2 sources· ubuntu_usn · debian_dsahighPoCEPSS 3.1%231.39.887.2%2026-09-07 09:05 UTC