Search

Expected end of text, found '/' (at char 24), (line:1, col:25)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (420574 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-118581 1 Mongodb 1 Java Driver 2026-11-05 6.5 Medium
A BSON encoding component of the MongoDB Java Driver does not verify that an externally supplied raw document's self-declared length agrees with the extent of the byte range it is given before that range is copied into an outgoing database command. An application that wraps untrusted raw bytes in such a document and uses it as part of a command can therefore emit a structurally inconsistent message, causing the database to interpret attacker-supplied trailing content as additional fields of the surrounding command. No authentication to the driver or database is required beyond the ability to influence those bytes through the victim application, and no user interaction is needed. The result is unintended modification of the command actually executed, which can alter the data read or written under the application's credentials.
CVE-2026-118435 1 Samsung Open Source 1 Escargot 2026-11-05 5.4 Medium
Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation.
CVE-2026-118426 1 Octopus 1 Octopus Server 2026-11-05 N/A
In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call the LDAP user search and LDAP group search.
CVE-2026-118026 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118024 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118023 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118022 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118021 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118020 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118019 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118018 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159.
CVE-2026-118017 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118016 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118015 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118013 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118012 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118011 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118010 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118009 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118007 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.