Search

Expected end of text, found ':' (at char 29), (line:1, col:30)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (373139 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-57876 2 Geovision, Geovision Inc. 2 Gv-lpc2011, Gv-lpclpc2011 2211 2026-06-29 7.5 High
An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing HTTP request body data. A remote attacker may exploit this vulnerability by sending a crafted request with excessive input, causing memory corruption and resulting in a denial of service.
CVE-2026-57879 2 Geovision, Geovision Inc. 2 Gv-lpc2011, Gv-lpclpc2011 2211 2026-06-29 9.8 Critical
An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing RTSP custom authentication data. A remote attacker may exploit this vulnerability by sending a crafted RTSP request, resulting in memory corruption, denial of service, or potentially arbitrary code execution.
CVE-2026-6658 1 Jupyter 1 Jupyter Server 2026-06-29 5.4 Medium
A vulnerability in jupyter/nbconvert versions <= 7.17.0 allows for Cross-site Scripting (XSS) via unsanitized `text/vnd.mermaid` output in HTML exports. The `data_mermaid` block in `share/templates/lab/base.html.j2` renders `text/vnd.mermaid` cell output directly into HTML without escaping, enabling attackers to inject arbitrary HTML/JavaScript by breaking out of the `<pre>` tag. This vulnerability impacts any server using nbconvert to render notebooks as HTML, allowing attackers to execute arbitrary JavaScript in the context of users viewing the HTML export.
CVE-2026-57620 2 Timstrifler, Wordpress 2 Exclusive Addons For Elementor, Wordpress 2026-06-29 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tim Strifler Exclusive Addons Elementor allows Stored XSS. This issue affects Exclusive Addons Elementor: from n/a through 2.7.9.8.
CVE-2026-24547 2 Siteground, Wordpress 2 Email-marketing, Wordpress 2026-06-29 5.3 Medium
Unauthenticated Broken Access Control in SiteGround Email Marketing <= 1.7.5 versions.
CVE-2026-54820 2 Crocoblock, Wordpress 2 Jetbooking, Wordpress 2026-06-29 9.3 Critical
Unauthenticated SQL Injection in JetBooking <= 4.0.4.1 versions.
CVE-2026-54824 2 Ads By Wpquads, Wordpress 2 Ads By Wpquads, Wordpress 2026-06-29 7.5 High
Unauthenticated Sensitive Data Exposure in Ads by WPQuads <= 3.0.3 versions.
CVE-2026-54827 2 Contempothemes, Wordpress 2 Real Estate 7, Wordpress 2026-06-29 9.3 Critical
Unauthenticated SQL Injection in Real Estate 7 <= 3.5.9 versions.
CVE-2026-54832 2 Jegstudio, Wordpress 2 Gutenverse, Wordpress 2026-06-29 7.5 High
Unauthenticated Broken Access Control in Gutenverse Companion <= 2.5.0 versions.
CVE-2026-54840 2 Tribulant, Wordpress 2 Newsletters, Wordpress 2026-06-29 7.3 High
Unauthenticated Broken Access Control in Newsletters <= 4.13 versions.
CVE-2026-56028 2 Themewant, Wordpress 2 Easy Elements For Elementor – Addons & Website Templates, Wordpress 2026-06-29 9.8 Critical
Unauthenticated Privilege Escalation in Easy Elements for Elementor &#8211; Addons &amp; Website Templates <= 1.4.9 versions.
CVE-2026-56030 2 Paytium, Wordpress 2 Paytium, Wordpress 2026-06-29 9.8 Critical
Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions.
CVE-2026-56034 2 Owthub, Wordpress 2 Library Management System, Wordpress 2026-06-29 9.3 Critical
Unauthenticated SQL Injection in Library Management System <= 3.5.7 versions.
CVE-2026-56046 2 Cridio, Wordpress 2 Listingpro, Wordpress 2026-06-29 6.5 Medium
Subscriber Cross Site Scripting (XSS) in ListingPro <= 2.9.11 versions.
CVE-2026-56048 1 Wordpress 2 Payment Gateway Based Fees And Discounts For Woocommerce, Wordpress 2026-06-29 6.5 Medium
Unauthenticated Insecure Direct Object References (IDOR) in Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0 versions.
CVE-2026-56057 2 Uncannyowl, Wordpress 2 Uncanny Automator, Wordpress 2026-06-29 9.8 Critical
Subscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions.
CVE-2026-56067 2 Jetimpex Inc., Wordpress 2 Jetsmartfilters, Wordpress 2026-06-29 9.3 Critical
Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions.
CVE-2026-56068 2 Crocoblock, Wordpress 2 Jetengine, Wordpress 2026-06-29 9.3 Critical
Unauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions.
CVE-2026-57315 2 Creativethemes, Wordpress 2 Blocksy Companion, Wordpress 2026-06-29 8.5 High
Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.
CVE-2026-57431 2 Mer.vin, Wordpress 2 Featured Image, Wordpress 2026-06-29 6.5 Medium
Author Cross Site Scripting (XSS) in Featured Image <= 2.1 versions.