Export limit exceeded: 36450 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 421046 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found '/' (at char 34), (line:1, col:35)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (421046 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2019-16476 2026-11-05 N/A
Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2019-16475 2026-11-05 N/A
Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2019-16474 2026-11-05 N/A
Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2019-16473 2026-11-05 N/A
Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2019-16472 2026-11-05 N/A
Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2026-93748 1 Http-cache-semantics Project 1 Http-cache-semantics 2026-11-05 7.5 High
http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can request the same URL with a large max-stale value to obtain another user's Set-Cookie session credentials from shared-cache entries that were deliberately zeroed for security reasons.
CVE-2026-93687 2 Jonschlinkert, Micromatch 2 Braces, Braces 2026-11-05 7.5 High
braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError.
CVE-2026-117953 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117951 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117949 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117948 1 Mozilla 1 Firefox 2026-11-05 6.3 Medium
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117947 1 Mozilla 1 Firefox 2026-11-05 6.3 Medium
Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117945 1 Mozilla 1 Firefox 2026-11-05 9.8 Critical
Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117944 1 Mozilla 1 Firefox 2026-11-05 6.3 Medium
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117941 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117935 1 Mozilla 1 Firefox 2026-11-05 6.3 Medium
Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117934 1 Mozilla 1 Firefox 2026-11-05 6.3 Medium
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2025-3359 1 Redhat 2 Enterprise Linux, Rhel Els 2026-11-05 6.2 Medium
A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.
CVE-2025-0620 2 Redhat, Samba 4 Enterprise Linux, Openshift, Rhel Els and 1 more 2026-11-05 4.9 Medium
A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.
CVE-2024-7383 1 Redhat 2 Advanced Virtualization, Enterprise Linux 2026-11-05 7.4 High
A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.