Search
151,643 CVEs · High severity
CVEs (151,643, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 126–150 of 151,643 (capped at 500)
| CVE ID | Severity ↓ | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-115504 | HIGH | 7.8 | 2026-10-22 | CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length st… | |
| CVE-2026-115505 | HIGH | Patched | 7.6 | 2026-10-22 | libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A malicious SMB serv… |
| CVE-2026-115506 | HIGH | 7.5 | 2026-10-22 | libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification … | |
| CVE-2026-115508 | HIGH | Patched | 6.5 | 2026-10-22 | Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unb… |
| CVE-2026-112330 | HIGH | Patched | 7.5 | 2026-10-22 | Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a consumed queue to crash the service permanently by sen… |
| CVE-2026-112331 | HIGH | Patched | 7.5 | 2026-10-22 | Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash the service permanentl… |
| CVE-2026-112332 | HIGH | Patched | 7.5 | 2026-10-22 | Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or… |
| CVE-2026-95712 | HIGH | 7.1 | 2026-10-22 | A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the… | |
| CVE-2026-95713 | HIGH | 7.0 | 2026-10-22 | An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to di… | |
| CVE-2026-95704 | HIGH | 7.2 | 2026-10-22 | A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful… | |
| CVE-2026-95705 | HIGH | 7.2 | 2026-10-22 | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Success… | |
| CVE-2026-95706 | HIGH | 7.2 | 2026-10-22 | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Success… | |
| CVE-2026-95707 | HIGH | 7.2 | 2026-10-22 | A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful… | |
| CVE-2026-95708 | HIGH | 7.2 | 2026-10-22 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command inject… | |
| CVE-2026-95709 | HIGH | 7.2 | 2026-10-22 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command inject… | |
| CVE-2026-95710 | HIGH | 7.1 | 2026-10-22 | An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduc… | |
| CVE-2026-95711 | HIGH | 7.1 | 2026-10-22 | An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authenticatio… | |
| CVE-2026-79895 | HIGH | 7.5 | 2026-10-22 | Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allo… | |
| CVE-2026-79955 | HIGH | 7.5 | 2026-10-22 | An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote attacker to conduc… | |
| CVE-2026-79956 | HIGH | 7.2 | 2026-10-22 | A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary commands on the underlying operatin… | |
| CVE-2026-79885 | HIGH | 8.2 | 2026-10-22 | An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to make limited mod… | |
| CVE-2026-79886 | HIGH | 8.2 | 2026-10-22 | An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the… | |
| CVE-2026-79887 | HIGH | 8.1 | 2026-10-22 | A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complet… | |
| CVE-2026-79888 | HIGH | 8.1 | 2026-10-22 | A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation co… | |
| CVE-2026-79889 | HIGH | 8.1 | 2026-10-22 | Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted … |