Export limit exceeded: 413484 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (437 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-43829 1 Advantech 1 Adam-3600 2026-10-23 7.5 High
A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled.
CVE-2026-43830 1 Advantech 1 Adam-3600 2026-10-23 9.8 Critical
A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands.
CVE-2026-43831 1 Advantech 1 Adam-3600 2026-10-23 7.5 High
A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution.
CVE-2026-43832 1 Advantech 1 Adam-3600 2026-10-23 7.5 High
A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled.
CVE-2026-43833 1 Advantech 1 Adam-3600 2026-10-23 5.3 Medium
A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution.
CVE-2026-43834 1 Advantech 1 Adam-3600 2026-10-22 N/A
A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.
CVE-2026-43856 1 Advantech 1 Adam-3600 2026-10-22 N/A
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.
CVE-2026-43854 1 Advantech 1 Adam-3600 2026-10-22 N/A
A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.
CVE-2026-43858 1 Advantech 1 Adam-3600 2026-10-20 N/A
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
CVE-2026-43838 1 Advantech 1 Adam-3600 2026-10-20 N/A
A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.
CVE-2026-43848 1 Advantech 1 Adam-3600 2026-10-20 N/A
A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.
CVE-2026-43850 1 Advantech 1 Adam-3600 2026-10-20 N/A
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.
CVE-2026-43852 1 Advantech 1 Adam-3600 2026-10-20 N/A
A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
CVE-2026-43853 1 Advantech 1 Adam-3600 2026-10-20 N/A
A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.
CVE-2026-43836 1 Advantech 1 Adam-3600 2026-10-20 N/A
A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.
CVE-2026-43843 1 Advantech 1 Adam-3600 2026-10-20 N/A
An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.
CVE-2026-43845 1 Advantech 1 Adam-3600 2026-10-20 N/A
A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
CVE-2026-43857 1 Advantech 1 Adam-3600 2026-10-20 N/A
A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.
CVE-2026-43842 1 Advantech 1 Adam-3600 2026-10-20 N/A
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.
CVE-2026-43840 1 Advantech 1 Adam-3600 2026-10-20 N/A
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.