Search
16,950 CVEs
CVEs (16,950, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 351–375 of 16,950 (capped at 500)
| CVE ID | Severity ↓ | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-21270 | NONE | — | 2026-10-20 | Rejected reason: this CVE was issued in error. | |
| CVE-2026-21356 | NONE | — | 2026-10-20 | Rejected reason: this CVE was issued in error. | |
| CVE-2026-113670 | NONE | — | 2026-10-20 | Rejected reason: This CVE is a duplicate of another CVE. | |
| CVE-2026-88041 | NONE | Patched | — | 2026-10-20 | Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request. This issue affects Apache Tom… |
| CVE-2026-93446 | NONE | Patched | — | 2026-10-20 | Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.… |
| CVE-2026-80353 | NONE | Patched | — | 2026-10-20 | Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local… |
| CVE-2026-74048 | NONE | Patched | — | 2026-10-20 | Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs … |
| CVE-2026-74049 | NONE | Patched | — | 2026-10-20 | Execution After Redirect (EAR) vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0… |
| CVE-2026-34484 | NONE | — | 2026-10-20 | Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker… | |
| CVE-2026-34485 | NONE | — | 2026-10-20 | Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain… | |
| CVE-2026-113399 | NONE | Patched | — | 2026-10-20 | Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1. |
| CVE-2026-108086 | NONE | — | 2026-10-20 | ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Cocoon. This issue affects A… | |
| CVE-2026-108087 | NONE | — | 2026-10-20 | ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Cocoon. This issue affects A… | |
| CVE-2026-108088 | NONE | — | 2026-10-20 | ** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using the cache on a multi-user application, cached value… | |
| CVE-2026-92287 | NONE | Patched | — | 2026-10-20 | Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure … |
| CVE-2026-86467 | NONE | Patched | — | 2026-10-20 | Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not bind the authentication response to the browser that began it. The login handler discards th… |
| CVE-2026-86977 | NONE | Patched | — | 2026-10-20 | An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages. |
| CVE-2026-86944 | NONE | Patched | — | 2026-10-20 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may … |
| CVE-2026-86948 | NONE | Patched | — | 2026-10-20 | This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox. |
| CVE-2026-86959 | NONE | Patched | — | 2026-10-20 | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS S… |
| CVE-2026-86935 | NONE | Patched | — | 2026-10-20 | This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user-sensitive data. |
| CVE-2026-86868 | NONE | Patched | — | 2026-10-20 | An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker may be … |
| CVE-2026-84579 | NONE | Patched | — | 2026-10-20 | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network sh… |
| CVE-2026-84582 | NONE | Patched | — | 2026-10-20 | A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app… |
| CVE-2026-28854 | NONE | Patched | — | 2026-10-20 | The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching. |