Search

Expected end of text, found '–' (at char 38), (line:1, col:39)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (374431 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-44945 1 Suse 1 Rancher 2026-08-06 9.1 Critical
A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user with the default user global role can gain full administrative access to the Rancher control plane and transitively to all downstream clusters it manages. This issue affects Rancher: from 2.11.0 before 2.11.16, from 2.12.0 before 2.12.12, from 2.13.0 before 2.13.8, and from 2.14.0 before 2.14.2.
CVE-2026-55997 1 Rancher 1 Rancher 2026-08-06 8.8 High
Rancher issues long-lived registration tokens to authenticate nodes and agents joining a downstream cluster. These tokens were stored and exposed in plaintext with no expiration, so a malicious user could obtain one either through the Rancher API, etcd, stored automation, or direct file access on a node, and could use it at any time to register a rogue node into the cluster.
CVE-2026-24076 1 Qualcomm 1 Snapdragon 2026-08-06 6.7 Medium
Memory Corruption when processing registry values with incorrect types using a direct query method.
CVE-2023-54389 2026-08-06 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54388 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54387 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54386 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54385 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54384 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54383 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54382 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54381 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54380 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54379 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54378 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54377 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54376 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54375 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2026-70427 1 Jenkins Project 1 Jenkins 2026-08-05 4.3 Medium
Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empty names during the extraction of `.tar` and `.tar.gz` archives, allowing attackers able to control agent processes to provide crafted archives to the controller to write files to arbitrary locations on the file system, restricted only by file system access permissions of the user running Jenkins.
CVE-2026-70431 1 Jenkins Project 1 Jenkins Multijob Plugin 2026-08-05 8.8 High
Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.