Export limit exceeded: 420602 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 26141 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 420602 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 420602 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 420602 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found 'èmes' (at char 20), (line:1, col:21)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (420602 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2019-16478 2026-11-05 N/A
Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2019-16477 2026-11-05 N/A
Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2019-16476 2026-11-05 N/A
Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2019-16475 2026-11-05 N/A
Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2019-16474 2026-11-05 N/A
Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2019-16473 2026-11-05 N/A
Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2019-16472 2026-11-05 N/A
Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2026-93748 1 Http-cache-semantics Project 1 Http-cache-semantics 2026-11-05 7.5 High
http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can request the same URL with a large max-stale value to obtain another user's Set-Cookie session credentials from shared-cache entries that were deliberately zeroed for security reasons.
CVE-2026-93687 2 Jonschlinkert, Micromatch 2 Braces, Braces 2026-11-05 7.5 High
braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError.
CVE-2026-117953 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117951 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117949 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117948 1 Mozilla 1 Firefox 2026-11-05 6.3 Medium
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117947 1 Mozilla 1 Firefox 2026-11-05 6.3 Medium
Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117945 1 Mozilla 1 Firefox 2026-11-05 9.8 Critical
Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117944 1 Mozilla 1 Firefox 2026-11-05 6.3 Medium
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117941 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117935 1 Mozilla 1 Firefox 2026-11-05 6.3 Medium
Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117934 1 Mozilla 1 Firefox 2026-11-05 6.3 Medium
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-99256 1 Linux 2 Linux, Linux Kernel 2026-11-05 4.4 Medium
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix issue with background work locking dm cache used a rw_semaphore for background_work_lock. Write locks on rw_semaphores have strict owner semantics, but there was no guarantee that the process that locked background_work_lock was the same process that unlocked it. This can be easily seen using a kernel compiled with CONFIG_DEBUG_RWSEMS. Given a dm cache device <cache>, run: 'dmsetup suspend <cache> && dmsetup resume <cache>'. This will trigger a kernel warning: DEBUG_RWSEMS_WARN_ON((rwsem_owner(sem) != current) && !rwsem_test_oflags(sem, RWSEM_NONSPINNABLE)) triggered by cache_resume(). To fix this, switch from a rw_semaphore to a spinlock and a wait queue. dm cache already has a wait queue and associated counter, migration_wait and nr_allocated_migrations, that was getting woken up when background work was getting completed, but wasn't actually used by anything. This is replaced by the background_work queue and counter.