Search
4,651 CVEs
CVEs (4,651, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 476–500 of 4,651 (capped at 500)
| CVE ID | Severity ↓ | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110688 | NONE | Patched | — | 2026-10-19 | Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer per value in incr_parse. At the first non-ASCII byte … |
| CVE-2026-110674 | NONE | Patched | — | 2026-10-19 | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion under dupkeys_as_arrayref in decode_hv. With allow_bar… |
| CVE-2026-110675 | NONE | Patched | — | 2026-10-19 | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv. With utf8 and allow_barekey, which rela… |
| CVE-2026-110676 | NONE | Patched | — | 2026-10-19 | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum. With allow_bignum, a JSON n… |
| CVE-2026-110677 | NONE | Patched | — | 2026-10-19 | Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as_arrayref in decode_hv. With dupkeys_as_arrayref, t… |
| CVE-2026-110678 | NONE | Patched | — | 2026-10-19 | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in incr_parse. The parser appends each chunk to its buf… |
| CVE-2026-110680 | NONE | Patched | — | 2026-10-19 | Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv. With canonical, the k… |
| CVE-2026-110681 | NONE | Patched | — | 2026-10-19 | Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a new ithread. A parser object holds its callbacks and… |
| CVE-2026-110682 | NONE | Patched | — | 2026-10-19 | Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level numbers in incr_parse. allow_nonref is enabled by default… |
| CVE-2026-110684 | NONE | Patched | — | 2026-10-19 | Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in encode_stringify. encode_stringify … |
| CVE-2026-110672 | NONE | Patched | — | 2026-10-19 | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key or a missing colon in decode_hv. A quoted key of 24 or more b… |
| CVE-2026-110673 | NONE | Patched | — | 2026-10-19 | Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag. With allow_tags, "(" starts a tagged value. … |
| CVE-2025-60482 | NONE | — | 2026-10-19 | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a De… | |
| CVE-2026-107084 | NONE | — | 2026-10-19 | Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules/circulation/loan_history_maintenance.php because th… | |
| CVE-2026-77225 | NONE | — | 2026-10-19 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-77227 | NONE | — | 2026-10-19 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-77228 | NONE | — | 2026-10-19 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-79613 | NONE | Patched | — | 2026-10-19 | vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could access comments associated with non-public content th… |
| CVE-2026-79620 | NONE | Patched | — | 2026-10-19 | Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An improper authorization chec… |
| CVE-2026-79624 | NONE | Patched | — | 2026-10-19 | Insufficient session expiration vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Insufficient session invalidation allowed revoked use… |
| CVE-2026-79633 | NONE | Patched | — | 2026-10-19 | vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Missing authorization checks allowed authenticated users to perform actions on non-pu… |
| CVE-2026-86589 | NONE | Patched | — | 2026-10-19 | Incorrect implementation of authentication algorithm vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. A flaw in the User Center login … |
| CVE-2026-64944 | NONE | Patched | — | 2026-10-19 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Th… |
| CVE-2026-64945 | NONE | Patched | — | 2026-10-19 | A vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The question operation controller gates hide/show operations on the wrong permission … |
| CVE-2026-67249 | NONE | Patched | — | 2026-10-19 | A vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. A verification code issued for one email-based workflow could be accepted by another … |