Export limit exceeded: 425694 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425694 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425694 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425694 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found '/' (at char 47), (line:1, col:48)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (425694 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-58844 1 Google 1 Android 2026-11-10 8.4 High
In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-123849 1 Jetbrains 1 Intellij Idea 2026-11-10 7 High
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers
CVE-2026-123848 1 Jetbrains 1 Intellij Idea 2026-11-10 7.4 High
In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates
CVE-2026-123847 1 Jetbrains 1 Intellij Idea 2026-11-10 5.3 Medium
In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command completion
CVE-2026-123846 1 Jetbrains 1 Intellij Idea 2026-11-10 4.3 Medium
In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation
CVE-2026-123845 1 Jetbrains 1 Intellij Idea 2026-11-10 3.3 Low
In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects
CVE-2026-123844 1 Jetbrains 1 Intellij Idea 2026-11-10 5.3 Medium
In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories
CVE-2026-123843 1 Jetbrains 1 Intellij Idea 2026-11-10 3.3 Low
In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration
CVE-2026-123842 1 Jetbrains 1 Intellij Idea 2026-11-10 7.1 High
In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives
CVE-2026-123841 1 Jetbrains 1 Intellij Idea 2026-11-10 7.8 High
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive
CVE-2026-123840 1 Jetbrains 1 Intellij Idea 2026-11-10 4.7 Medium
In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs
CVE-2026-123308 1 Jetbrains 1 Intellij Idea 2026-11-10 6.3 Medium
In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects
CVE-2026-123309 1 Jetbrains 1 Intellij Idea 2026-11-10 6.1 Medium
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown preview
CVE-2026-123310 1 Jetbrains 1 Intellij Idea 2026-11-10 5.4 Medium
In JetBrains IntelliJ IDEA before 2026.3 kotlin scripts could trigger dependency downloads from arbitrary repositories in untrusted projects
CVE-2026-123311 1 Jetbrains 1 Intellij Idea 2026-11-10 5.3 Medium
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible
CVE-2026-123312 1 Jetbrains 1 Intellij Idea 2026-11-10 3.3 Low
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 sSRF was possible via annotations.xml files during indexing
CVE-2026-123313 1 Jetbrains 1 Intellij Idea 2026-11-10 3.3 Low
In JetBrains IntelliJ IDEA before 2026.3 improper checks could enable disabled plugins via external dependency settings
CVE-2026-123314 1 Jetbrains 1 Intellij Idea 2026-11-10 3.1 Low
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 xXE attack was possible via an XML response to an HTTP Client request
CVE-2026-123833 1 Jetbrains 1 Intellij Idea 2026-11-10 3.6 Low
In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects
CVE-2026-123837 1 Jetbrains 1 Intellij Idea 2026-11-10 7.8 High
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untrusted projects via Tomcat run configurations on WSL