Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (16978 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-119525 2 Wordpress-extensions, Wp Desk 2 Dropshipping Xml For Woocommerce, Dropshipping Xml For Woocommerce 2026-11-12 4.3 Medium
Missing Authorization vulnerability in WP Desk Dropshipping XML for WooCommerce dropshipping-xml-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dropshipping XML for WooCommerce: from n/a through 1.7.4.
CVE-2026-123148 2 Tms, Wordpress-extensions 2 Ivyforms, Ivyforms 2026-11-12 5.3 Medium
Missing Authorization vulnerability in TMS IvyForms ivyforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IvyForms: from n/a through 1.5.1.
CVE-2026-119513 2 Ahmad, Wordpress-extensions 2 Js Help Desk, Js Help Desk 2026-11-12 5.3 Medium
Missing Authorization vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 5.0.3.
CVE-2026-123462 2 Mycred, Wordpress-extensions 2 Mycred, Mycred 2026-11-12 5.3 Medium
Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.
CVE-2026-122660 2 Bakkbone Australia, Wordpress-extensions 2 Floristpress, Floristpress 2026-11-12 4.3 Medium
Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FloristPress: from n/a through 7.8.5.
CVE-2026-106027 1 Wordpress-extensions 1 Oxygen Mydata For Woocommerce 2026-11-12 5.3 Medium
The Oxygen MyData for WooCommerce WordPress plugin before 3.0.9 does not have proper authorisation, nor validate the authenticity of the request, on one of its payment callbacks, allowing unauthenticated users to mark arbitrary WooCommerce orders as completed.
CVE-2026-101542 1 Oracle 2 Capacity, E-business Suite 2026-11-12 8.8 High
Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Capacity. Successful attacks of this vulnerability can result in takeover of Oracle Capacity. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-123391 1 Microsoft 1 Sharepoint Server 2026-11-12 8.8 High
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-121668 1 Microsoft 1 Azure Confidential Clean Room 2026-11-12 7.7 High
Missing authorization in Azure Confidential Clean Rooms allows an authorized attacker to perform tampering over a network.
CVE-2026-120782 1 Microsoft 1 Visual Studio Code 2026-11-12 7.8 High
Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-96845 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-11-12 7.8 High
Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.
CVE-2026-121355 1 Adobe 1 Adobe Connect 2026-11-12 9.1 Critical
Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated access to sensitive information or functionality. Exploitation of this issue does not require user interaction.
CVE-2026-121574 2 Wordpress-extensions, Wpchill 2 Passster, Passster 2026-11-12 5.3 Medium
Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20.
CVE-2026-96162 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-12 7.8 High
Incorrect authorization in Windows Clipboard Virtual Channel Extension allows an authorized attacker to elevate privileges locally.
CVE-2026-96029 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-12 7.8 High
Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-95988 1 Microsoft 4 Windows 11 24h2, Windows 11 25h2, Windows 11 26h1 and 1 more 2026-11-12 7.8 High
Incorrect authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96133 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-12 5.5 Medium
Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
CVE-2026-88176 1 Microsoft 1 Sharepoint Server 2026-11-12 8.8 High
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-125431 2026-11-12 5.3 Medium
Missing Authorization vulnerability in Mamunur Rashid Food Menu – Restaurant Menu & Online Ordering for WooCommerce tlp-food-menu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Food Menu – Restaurant Menu & Online Ordering for WooCommerce: from n/a through 6.0.7.
CVE-2026-125046 2026-11-12 5.3 Medium
Missing Authorization vulnerability in John-Michael L'Allier Create mediavine-create allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Create: from n/a through 3.1.1.