Search
545 CVEs · published 2026-10-29 to 2026-10-29
CVEs (545, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 51–75 of 545 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-119193 | MEDIUM | Patched | — | 2026-10-29 | PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory() logic in src/Runner/Phpt/TestCase.php creates temporary files for P… |
| CVE-2026-119191 | HIGH | Patched | 7.5 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used asn1.fromDer(), BIT ST… |
| CVE-2026-119190 | HIGH | Patched | 7.4 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge parsed deprecated extension OIDs 2.5.29.10 a… |
| CVE-2026-119189 | MEDIUM | Patched | 5.9 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge enforced an X.509 CA certificate's basicCons… |
| CVE-2026-119188 | HIGH | Patched | 7.5 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnec… |
| CVE-2026-119187 | HIGH | Patched | 7.5 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnec… |
| CVE-2026-119186 | MEDIUM | Patched | 5.9 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge did not validate the AES-GCM tagLength optio… |
| CVE-2026-9536 | HIGH | 7.5 | 2026-10-29 | A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted .wind can lead… | |
| CVE-2026-9535 | HIGH | 8.2 | 2026-10-29 | A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially crafted chaco can lead to an out-of-bounds… | |
| CVE-2026-8824 | HIGH | 7.5 | 2026-10-29 | A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1). A specially crafted .bmp file can lead to … | |
| CVE-2026-8822 | HIGH | 7.5 | 2026-10-29 | A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A specially crafted USGS DEM can lead to a buffer overfl… | |
| CVE-2026-6877 | MEDIUM | Patched | — | 2026-10-29 | ServiceNow has addressed a domain separation bypass security issue that was identified in the ServiceNow SR – CSM – Task Plan Templates Store application. This vulnerabilit… |
| CVE-2026-58120 | NONE | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-58119 | NONE | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-58118 | NONE | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-42057 | HIGH | 7.5 | 2026-10-29 | An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead to a denial of… | |
| CVE-2026-41216 | HIGH | 7.5 | 2026-10-29 | An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to a denial of … | |
| CVE-2026-119251 | MEDIUM | 6.7 | 2026-10-29 | A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on … | |
| CVE-2026-119250 | HIGH | 7.8 | 2026-10-29 | A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop for macOS to execute ar… | |
| CVE-2026-119249 | HIGH | 7.5 | 2026-10-29 | A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop for macOS to obtain information ab… | |
| CVE-2026-119168 | HIGH | Patched | 8.8 | 2026-10-29 | HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious workload to change permissi… |
| CVE-2026-118782 | HIGH | Patched | 7.5 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS#12 MAC or PKCS#12 password-b… |
| CVE-2026-118781 | LOW | Patched | 2.9 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used BigInteger.prototype.m… |
| CVE-2026-118780 | LOW | Patched | 3.7 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pki.verifyCertificateC… |
| CVE-2026-118779 | HIGH | Patched | 7.5 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pem.decode(), lib/pem.… |