Export limit exceeded: 395321 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (395321 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-92068 1 Mozilla 1 Firefox 2026-09-16 3.4 Low
Site isolation issue in the Reader Mode component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92079 1 Mozilla 1 Firefox 2026-09-16 3.4 Low
Mitigation bypass in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92046 1 Mozilla 1 Firefox 2026-09-16 6.1 Medium
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-89156 1 Pcre 1 Pcre2 2026-09-16 2.9 Low
PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.
CVE-2026-69646 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 8.3 High
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.
CVE-2026-69642 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 6.5 Medium
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-89157 1 Pcre 1 Pcre2 2026-09-16 5.7 Medium
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.
CVE-2026-66308 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 6.5 Medium
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.
CVE-2026-66307 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 7.5 High
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
CVE-2026-66306 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 6.5 Medium
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.
CVE-2026-66305 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 7.1 High
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.
CVE-2026-89158 1 Pcre 1 Pcre2 2026-09-16 6.5 Medium
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.
CVE-2026-66304 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 7.5 High
Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.
CVE-2026-66303 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 6.5 Medium
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.
CVE-2026-66302 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 9.8 Critical
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
CVE-2026-63523 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 6.5 Medium
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-92234 1 Webkul 1 Qloapps 2026-09-16 5.4 Medium
QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back-office users who follow a crafted link can execute injected JavaScript in their administrative session via the child_features parameter.
CVE-2026-92216 1 A2ui-project 1 A2ui 2026-09-16 4.3 Medium
A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the function openUrl of the file renderers/web_core/src/v0_9/rendering/generic-binder.ts of the component Binder. The manipulation results in open redirect. It is possible to launch the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-92114 1 A2ui-project 1 A2ui 2026-09-16 5.3 Medium
A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/web_core/src/v0_9/basic_catalog/functions/safe_regex.ts of the component Basic Catalog. Such manipulation leads to inefficient regular expression complexity. The attack can be launched remotely.
CVE-2026-85628 2026-09-16 N/A
Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.