Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (3710 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-62124 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.
CVE-2026-62123 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.
CVE-2026-62120 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.
CVE-2026-62090 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.
CVE-2026-62087 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.
CVE-2026-62086 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Juno <= 2.25 versions.
CVE-2026-62077 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.
CVE-2026-62076 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.
CVE-2026-62054 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.
CVE-2026-62053 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.
CVE-2026-62052 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.
CVE-2026-62051 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.
CVE-2026-62050 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.
CVE-2026-42723 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.
CVE-2026-42718 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.
CVE-2026-42716 2026-10-11 9.8 Critical
Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.
CVE-2026-78401 1 Ibm 4 Security Verify Access, Security Verify Access Container, Verify Identity Access and 1 more 2026-10-10 9.8 Critical
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data.
CVE-2026-94568 2026-10-09 7.2 High
Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object Injection.This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.0.
CVE-2026-104392 2026-10-09 8.8 High
Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Survey Master: from n/a through 11.2.7.
CVE-2026-106123 2 Rabbitmq, Vmware 3 Amqp-client, Java-client, Rabbitmq Java Client 2026-10-09 5.5 Medium
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.35.0, ConnectionFactoryConfigurator.load() includes the raw uri value in wrapped exceptions when AMQP URI parsing fails. Because the URI may contain a plaintext username and password, startup logs, application performance monitoring systems, CI logs, and copied stack traces can disclose broker credentials to users who should not have access to them. This issue is fixed in version 5.35.0.