Search

Expected end of text, found ':' (at char 26), (line:1, col:27)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (421045 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-93523 1 X.org 3 X Server, Xorg-x11-server, Xwayland 2026-11-07 7.8 High
A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.
CVE-2026-93520 1 X.org 3 Xorg-server, Xorg-x11-server, Xwayland 2026-11-07 7.8 High
A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X server before 2.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.
CVE-2026-86958 1 Apple 1 Macos 2026-11-07 7.8 High
The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code.
CVE-2026-19868 1 Sonicwall 1 Sonicos 2026-11-07 7.5 High
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
CVE-2026-123855 1 Jetbrains 1 Toolbox 2026-11-07 7.5 High
In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration URLs
CVE-2026-123854 1 Jetbrains 1 Pycharm 2026-11-07 5.5 Medium
In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module
CVE-2026-123853 1 Jetbrains 1 Intellij Idea 2026-11-07 7.8 High
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build process
CVE-2026-123849 1 Jetbrains 1 Intellij Idea 2026-11-07 7 High
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers
CVE-2026-123848 1 Jetbrains 1 Intellij Idea 2026-11-07 7.4 High
In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates
CVE-2026-123847 1 Jetbrains 1 Intellij Idea 2026-11-07 5.3 Medium
In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command completion
CVE-2026-123841 1 Jetbrains 1 Intellij Idea 2026-11-07 7.8 High
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive
CVE-2026-123838 1 Jetbrains 1 Intellij Idea 2026-11-07 7.8 High
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file
CVE-2026-123837 1 Jetbrains 1 Intellij Idea 2026-11-07 7.8 High
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untrusted projects via Tomcat run configurations on WSL
CVE-2026-123832 1 Jetbrains 1 Clion 2026-11-07 9.6 Critical
In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database
CVE-2026-123831 1 Jetbrains 1 Clion 2026-11-07 9.6 Critical
In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settings
CVE-2026-123328 1 Jetbrains 1 Youtrack 2026-11-07 6.4 Medium
In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab
CVE-2026-123325 1 Jetbrains 1 Youtrack 2026-11-07 7.1 High
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page
CVE-2026-123311 1 Jetbrains 1 Intellij Idea 2026-11-07 5.3 Medium
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible
CVE-2026-123308 1 Jetbrains 1 Intellij Idea 2026-11-07 6.3 Medium
In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects
CVE-2026-123305 1 Jetbrains 1 Intellij Idea 2026-11-07 7.5 High
In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via unpacking Dev Container archives from a remote host