Search

Expected end of text, found '\' (at char 27), (line:1, col:28)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (380930 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-10595 1 Parisneo 1 Parisneo/lollms 2026-08-10 N/A
A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemented in `backend/routers/ui.py`. The vulnerability arises from the improper handling of user-controlled path input, which is directly joined into a filesystem path without sanitization or containment checks. URL-encoded dot-dot sequences (`%2e%2e`) bypass Starlette's built-in path normalization and are resolved by Python's `pathlib`, allowing an unauthenticated attacker to read arbitrary files on the server. This issue has been resolved in version 3.
CVE-2026-13377 1 Watchguard 40 Firebox M270, Firebox M290, Firebox M295 and 37 more 2026-08-10 4.8 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS SIP Proxy module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-6947.
CVE-2026-13376 1 Watchguard 40 Firebox M270, Firebox M290, Firebox M295 and 37 more 2026-08-10 4.8 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS spamBlocker module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-1071. This issue affects Fireware OS 12.0 up to and including 12.12, 12.5 up to and including 12.5.18, and 2025.1 up to and including 2026.2.
CVE-2026-13373 1 Watchguard 40 Firebox M270, Firebox M290, Firebox M295 and 37 more 2026-08-10 4.8 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integration module) allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-13936.
CVE-2026-13374 1 Watchguard 40 Firebox M270, Firebox M290, Firebox M295 and 37 more 2026-08-10 4.8 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Technology Integration module) allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-13937.
CVE-2026-13375 1 Watchguard 40 Firebox M270, Firebox M290, Firebox M295 and 37 more 2026-08-10 4.8 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integration module) allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-13938. This issue affects Fireware OS 12.4 up to and including 12.12, 12.5 up to and including 12.5.18, and 2025.1 up to and including 2026.2.
CVE-2026-6788 1 Watchguard 3 Agent, Single Watchguard Agent, Watchguard Agent 2026-08-10 7.8 High
Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.
CVE-2026-40512 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-6787 1 Watchguard 3 Agent, Single Watchguard Agent, Watchguard Agent 2026-08-10 7.8 High
Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.
CVE-2026-35006 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-35005 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-22653 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-22654 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-22655 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-22656 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-22657 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-22658 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-22652 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-22651 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-35028 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.