Search
172,839 CVEs · Medium severity
CVEs (172,839, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 126–150 of 172,839 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-97821 | MEDIUM | Patched | 6.5 | 2026-10-13 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97820 | MEDIUM | Patched | 6.5 | 2026-10-13 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97819 | MEDIUM | Patched | 6.5 | 2026-10-13 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97817 | MEDIUM | Patched | 6.5 | 2026-10-13 | Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97813 | MEDIUM | Patched | 6.5 | 2026-10-13 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network. |
| CVE-2026-97790 | MEDIUM | Patched | 5.5 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tamper… |
| CVE-2026-97782 | MEDIUM | 6.8 | 2026-10-13 | Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network. | |
| CVE-2026-97779 | MEDIUM | Patched | 6.5 | 2026-10-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-97760 | MEDIUM | Patched | 6.5 | 2026-10-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-9775 | MEDIUM | Patched | 6.5 | 2026-06-24 | ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installati… |
| CVE-2026-97744 | MEDIUM | 5.5 | 2026-10-13 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | |
| CVE-2026-97743 | MEDIUM | 6.5 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | |
| CVE-2026-97740 | MEDIUM | Patched | 6.5 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-9774 | MEDIUM | Patched | 6.5 | 2026-06-24 | ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected instal… |
| CVE-2026-97736 | MEDIUM | Patched | 5.4 | 2026-09-25 | tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression. |
| CVE-2026-97732 | MEDIUM | 5.1 | 2026-09-25 | IRONMACE Ironshield 1.0.0.167 has a tvk.sys kernel-mode driver that authenticates client executables by checking for expected publisher and root-certificate strings in WIN_… | |
| CVE-2026-97724 | MEDIUM | Patched | 4.3 | 2026-09-25 | A prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2 allows an attacker-controlled object containing a __proto__ property to modify t… |
| CVE-2026-97723 | MEDIUM | Patched | 5.4 | 2026-09-25 | madpsy ka9q_ubersdr before 0.1.58 has a stored cross-site scripting (XSS) vulnerability in the chat message rendering functionality. User-controlled URLs in chat messages w… |
| CVE-2026-97717 | MEDIUM | — | 2026-10-07 | CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the server and cause a… | |
| CVE-2026-9770 | MEDIUM | Patched | 5.3 | 2026-07-15 | Kasa EC71 v4 and EC70 v4 firmware contains a static cryptographic private key stored in a read-only filesystem that is shared across devices. An attacker with access to th… |
| CVE-2026-97691 | MEDIUM | Patched | 4.3 | 2026-10-12 | Convex is an open-source reactive database for application developers. Prior to the self-hosted image published on August 10, 2026 and local deployment binary precompiled-2… |
| CVE-2026-97688 | MEDIUM | Patched | 5.3 | 2026-09-29 | urllib3 is an HTTP client library for Python. From 2.6.2 until 2.8.0, HTTPResponse.stream and HTTPResponse.read_chunked can enter an infinite loop because the Deflate decod… |
| CVE-2026-97686 | MEDIUM | Patched | 5.5 | 2026-09-28 | Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file de… |
| CVE-2026-97671 | MEDIUM | Patched | 6.5 | 2026-10-07 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability. |
| CVE-2026-9767 | MEDIUM | 6.5 | 2026-08-16 | The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]' Parameter in all versions up to, and in… |