Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (5134 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-124947 2026-11-10 8.8 High
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160.
CVE-2026-124926 2026-11-10 8.8 High
Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124924 2026-11-10 8.8 High
Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124918 2026-11-10 8.8 High
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124915 2026-11-10 8.8 High
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124891 2026-11-10 8.8 High
Incorrect boundary conditions in the DOM: Selection component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124888 2026-11-10 8.8 High
Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124887 2026-11-10 8.8 High
Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124875 2026-11-10 8.8 High
Incorrect boundary conditions in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
CVE-2026-124870 2026-11-10 8.8 High
Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124868 2026-11-10 8.8 High
Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124859 2026-11-10 9.6 Critical
Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
CVE-2026-124856 2026-11-10 8.8 High
Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124852 2026-11-10 8.8 High
Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160.
CVE-2026-48173 1 Samsung Semiconductor 19 Exynos 1280, Exynos 1330, Exynos 1380 and 16 more 2026-11-10 9.8 Critical
In the NAS message handler, improper validation of the length field in NAS message causes memory corruption
CVE-2026-124562 2 D-link, Dlink 2 Dir-878, Dir-878 2026-11-09 7.5 High
A vulnerability was identified in D-Link DIR-878 1.20B05. Affected is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument ConfigDNS/Primary/ConfigDNS/Secondary leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2021-20027 1 Sonicwall 59 Nsa 2650, Nsa 2700, Nsa 3650 and 56 more 2026-11-09 7.5 High
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted request. This vulnerability affects SonicOS Gen5, Gen6, Gen7 platforms, and SonicOSv virtual firewalls.
CVE-2026-124060 1 Totolink 2 Ca300-poe, Ca300-poe Firmware 2026-11-09 9.1 Critical
A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.
CVE-2026-123961 1 Totolink 2 Ca300-poe, Ca300-poe Firmware 2026-11-09 9.9 Critical
A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument KeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
CVE-2026-123957 1 Totolink 2 Ca300-poe, Ca300-poe Firmware 2026-11-09 9.9 Critical
A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ipStart causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.