Search

Expected end of text, found '.' (at char 20), (line:1, col:21)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (374076 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-44945 1 Suse 1 Rancher 2026-08-06 9.1 Critical
A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user with the default user global role can gain full administrative access to the Rancher control plane and transitively to all downstream clusters it manages. This issue affects Rancher: from 2.11.0 before 2.11.16, from 2.12.0 before 2.12.12, from 2.13.0 before 2.13.8, and from 2.14.0 before 2.14.2.
CVE-2026-55997 1 Rancher 1 Rancher 2026-08-06 8.8 High
Rancher issues long-lived registration tokens to authenticate nodes and agents joining a downstream cluster. These tokens were stored and exposed in plaintext with no expiration, so a malicious user could obtain one either through the Rancher API, etcd, stored automation, or direct file access on a node, and could use it at any time to register a rogue node into the cluster.
CVE-2026-70446 2026-08-06 4.3 Medium
Missing permission checks in Jenkins CodeSonar Plugin 3.6.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVE-2026-24076 1 Qualcomm 1 Snapdragon 2026-08-06 6.7 Medium
Memory Corruption when processing registry values with incorrect types using a direct query method.
CVE-2023-54389 2026-08-06 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2026-70442 2026-08-06 4.3 Medium
Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to use.
CVE-2023-54388 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54387 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54386 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54385 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54384 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54383 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54382 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54381 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54380 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54379 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54378 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54377 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54376 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54375 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.