Search
16,950 CVEs
CVEs (16,950, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 251–275 of 16,950 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↑ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-76529 | NONE | — | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a sof… | |
| CVE-2026-76300 | NONE | — | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a sof… | |
| CVE-2026-76301 | NONE | — | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a sof… | |
| CVE-2026-106053 | NONE | — | 2026-10-21 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-94140 | NONE | — | 2026-10-21 | Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no. Every remote branch of sync… | |
| CVE-2026-94423 | NONE | Patched | — | 2026-10-21 | Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts. connect reports success as s… |
| CVE-2026-112921 | NONE | Patched | — | 2026-10-21 | Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher state carries over from a previous request. Each Robo… |
| CVE-2026-82987 | NONE | — | 2026-10-21 | There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate t… | |
| CVE-2026-113811 | NONE | Patched | — | 2026-10-21 | Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory exhaustion via a never-cleared failure shift cache in search. The failure shift is cached f… |
| CVE-2026-114463 | NONE | — | 2026-10-21 | The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{route_name}:{delivery_id} and re-derives the authorizing route by… | |
| CVE-2026-102536 | NONE | — | 2026-10-21 | Rejected reason: This CVE has been rejected because it was issued to a development-only issue with no affected distributed version identified. | |
| CVE-2025-60469 | NONE | Patched | — | 2026-10-21 | A NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of S… |
| CVE-2025-60476 | NONE | Patched | — | 2026-10-21 | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) v… |
| CVE-2025-60493 | NONE | Patched | — | 2026-10-21 | A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via su… |
| CVE-2025-60478 | NONE | Patched | — | 2026-10-21 | A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) … |
| CVE-2025-60487 | NONE | Patched | — | 2026-10-21 | A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via s… |
| CVE-2025-60490 | NONE | Patched | — | 2026-10-21 | A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial o… |
| CVE-2025-60491 | NONE | Patched | — | 2026-10-21 | A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via sup… |
| CVE-2025-60489 | NONE | Patched | — | 2026-10-21 | A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service … |
| CVE-2025-71438 | NONE | — | 2026-10-21 | An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service (DoS) via supplying… | |
| CVE-2025-60479 | NONE | Patched | — | 2026-10-21 | A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) … |
| CVE-2025-0326 | NONE | — | 2026-10-21 | The system fails to invalidate existing access tokens associated with sub-organization users during sensitive account management operations such as password reset, role cha… | |
| CVE-2026-90484 | NONE | Patched | — | 2026-10-21 | The MySQL client response parser in Apache bRPC dereferences a null pointer when the server peer sends a zero-payload-length response packet. A response packet whose declar… |
| CVE-2026-86146 | NONE | — | 2026-10-21 | Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in the bundled HTTP/1.1 parser of Apache bRPC (version < 1.18.0) on all platforms allows remo… | |
| CVE-2026-86147 | NONE | — | 2026-10-21 | External control of file name or path and uncontrolled resource consumption in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers who can reach the bui… |