Search
6,516 CVEs · High severity
CVEs (6,516, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 126–150 of 6,516 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-115508 | HIGH | Patched | 6.5 | 2026-10-22 | Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unb… |
| CVE-2026-115506 | HIGH | 7.5 | 2026-10-22 | libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification … | |
| CVE-2026-115505 | HIGH | Patched | 7.6 | 2026-10-22 | libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A malicious SMB serv… |
| CVE-2026-115504 | HIGH | 7.8 | 2026-10-22 | CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length st… | |
| CVE-2026-112332 | HIGH | Patched | 7.5 | 2026-10-22 | Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or… |
| CVE-2026-112331 | HIGH | Patched | 7.5 | 2026-10-22 | Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash the service permanentl… |
| CVE-2026-112330 | HIGH | Patched | 7.5 | 2026-10-22 | Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a consumed queue to crash the service permanently by sen… |
| CVE-2026-95713 | HIGH | 7.0 | 2026-10-22 | An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to di… | |
| CVE-2026-95712 | HIGH | 7.1 | 2026-10-22 | A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the… | |
| CVE-2026-95711 | HIGH | 7.1 | 2026-10-22 | An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authenticatio… | |
| CVE-2026-95710 | HIGH | 7.1 | 2026-10-22 | An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduc… | |
| CVE-2026-95709 | HIGH | 7.2 | 2026-10-22 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command inject… | |
| CVE-2026-95708 | HIGH | 7.2 | 2026-10-22 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command inject… | |
| CVE-2026-95707 | HIGH | 7.2 | 2026-10-22 | A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful… | |
| CVE-2026-95706 | HIGH | 7.2 | 2026-10-22 | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Success… | |
| CVE-2026-95705 | HIGH | 7.2 | 2026-10-22 | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Success… | |
| CVE-2026-95704 | HIGH | 7.2 | 2026-10-22 | A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful… | |
| CVE-2026-79956 | HIGH | 7.2 | 2026-10-22 | A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary commands on the underlying operatin… | |
| CVE-2026-79955 | HIGH | 7.5 | 2026-10-22 | An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote attacker to conduc… | |
| CVE-2026-79895 | HIGH | 7.5 | 2026-10-22 | Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allo… | |
| CVE-2026-79894 | HIGH | 7.5 | 2026-10-22 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation of this vulnerability results in the ability to disru… | |
| CVE-2026-79893 | HIGH | 7.5 | 2026-10-22 | Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an att… | |
| CVE-2026-79892 | HIGH | 7.8 | 2026-10-22 | A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attack… | |
| CVE-2026-79891 | HIGH | 8.1 | 2026-10-22 | A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlyin… | |
| CVE-2026-79890 | HIGH | 8.1 | 2026-10-22 | There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploita… |