Export limit exceeded: 421045 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 421045 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 421045 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 28), (line:1, col:29)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (421045 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2023-5009 1 Gitlab 1 Gitlab 2026-10-28 8.2 High
An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies. This was a bypass of [CVE-2023-3932](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3932) showing additional impact.
CVE-2023-3932 1 Gitlab 1 Gitlab 2026-10-28 8.2 High
An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies.
CVE-2026-87309 1 Oracle 1 Jd Edwards Enterpriseone Tools 2026-10-28 8.1 High
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all JD Edwards EnterpriseOne Tools accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 8.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H).
CVE-2026-117858 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117857 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117856 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117855 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117854 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117853 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117852 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117851 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117850 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117849 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117848 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117847 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117846 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117845 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117844 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117843 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117842 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.