Export limit exceeded: 401236 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found '/' (at char 40), (line:1, col:41)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (401236 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-79654 1 Redhat 3 Satellite, Satellite Capsule, Satellite Utils 2026-10-02 4.3 Medium
A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing a Content View specified by the user. An authenticated user with permission to view Content Views in one organization may be able to access the lifecycle history of a Content View belonging to another organization by supplying its identifier to the affected API endpoint. This can result in unauthorized disclosure of Content View lifecycle information, including publication and promotion events, associated users, and timestamps.
CVE-2026-103627 1 Google 1 Chrome 2026-10-02 N/A
Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-58567 1 Dell 13 Powerstore 1000t, Powerstore 1200t, Powerstore 3000t and 10 more 2026-10-02 8.8 High
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
CVE-2026-79682 1 Dell 13 Powerstore 1000t, Powerstore 1200t, Powerstore 3000t and 10 more 2026-10-02 8.8 High
Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
CVE-2026-58569 1 Dell 13 Powerstore 1000t, Powerstore 1200t, Powerstore 3000t and 10 more 2026-10-02 8.8 High
Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges..
CVE-2026-58572 1 Dell 13 Powerstore 1000t, Powerstore 1200t, Powerstore 3000t and 10 more 2026-10-02 8.8 High
Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges.
CVE-2026-58571 1 Dell 13 Powerstore 1000t, Powerstore 1200t, Powerstore 3000t and 10 more 2026-10-02 8.8 High
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
CVE-2026-79687 1 Dell 13 Powerstore 1000t, Powerstore 1200t, Powerstore 3000t and 10 more 2026-10-02 9 Critical
Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access.
CVE-2026-79684 1 Dell 13 Powerstore 1000t, Powerstore 1200t, Powerstore 3000t and 10 more 2026-10-02 8.8 High
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.
CVE-2026-79686 1 Dell 13 Powerstore 1000t, Powerstore 1200t, Powerstore 3000t and 10 more 2026-10-02 8.8 High
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.
CVE-2026-79685 1 Dell 13 Powerstore 1000t, Powerstore 1200t, Powerstore 3000t and 10 more 2026-10-02 6.5 Medium
Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to gain unauthorized access to sensitive sensitive system information.
CVE-2026-96294 1 Apache 1 Thrift 2026-10-02 N/A
Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift NodeJS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.
CVE-2026-94650 2 Apache, Redhat 2 Thrift, Hummingbird 2026-10-02 N/A
Uncontrolled Recursion vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.
CVE-2026-94635 1 Apache 1 Thrift 2026-10-02 7.5 High
Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.
CVE-2026-85493 1 Apache 1 Thrift 2026-10-02 N/A
Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.
CVE-2026-85483 1 Apache 1 Thrift 2026-10-02 N/A
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.
CVE-2026-83632 1 Apache 1 Thrift 2026-10-02 N/A
Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.
CVE-2026-66859 1 Apache 1 Thrift 2026-10-02 N/A
NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.
CVE-2026-66837 2 Apache, Redhat 2 Thrift, Hummingbird 2026-10-02 7.5 High
Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.
CVE-2026-66081 2 Apache, Redhat 2 Thrift, Hummingbird 2026-10-02 N/A
Access of Uninitialized Pointer vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.