Search
16,920 CVEs · High severity
CVEs (16,920, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 151–175 of 16,920 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-79889 | HIGH | 8.1 | 2026-10-22 | Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted … | |
| CVE-2026-79888 | HIGH | 8.1 | 2026-10-22 | A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation co… | |
| CVE-2026-79887 | HIGH | 8.1 | 2026-10-22 | A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complet… | |
| CVE-2026-79886 | HIGH | 8.2 | 2026-10-22 | An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the… | |
| CVE-2026-79885 | HIGH | 8.2 | 2026-10-22 | An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to make limited mod… | |
| CVE-2026-79884 | HIGH | 8.2 | 2026-10-22 | A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to bypass existing authentication controls and access sensit… | |
| CVE-2026-79883 | HIGH | 8.3 | 2026-10-22 | A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful e… | |
| CVE-2026-79882 | HIGH | 8.3 | 2026-10-22 | There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code execution by an adjacent attacker sending specially… | |
| CVE-2026-79881 | HIGH | 8.3 | 2026-10-22 | An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication cont… | |
| CVE-2026-79880 | HIGH | 8.7 | 2026-10-22 | A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery (SSRF) att… | |
| CVE-2026-79879 | HIGH | 8.8 | 2026-10-22 | Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an unauthenticated adjacent attacker. Successful exploitation c… | |
| CVE-2026-79878 | HIGH | 8.8 | 2026-10-22 | A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauthenticated remote code execution by an adjacent attac… | |
| CVE-2026-79877 | HIGH | 8.8 | 2026-10-22 | A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated adjacent attacker to execute arbitrary code on an affected… | |
| CVE-2026-115414 | HIGH | Patched | 7.8 | 2026-10-22 | OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build… |
| CVE-2026-115392 | HIGH | Patched | 7.9 | 2026-10-22 | Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandbox escape in wasmtime-wasi because its cap-std depen… |
| CVE-2026-115376 | HIGH | Patched | 7.7 | 2026-10-22 | Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows project-restricted clients to copy volumes by omitting source.typ… |
| CVE-2026-115374 | HIGH | Patched | 7.1 | 2026-10-22 | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a signature verification flaw in its built-in S3 server that allows presigned URL holders to inject unsigned x-amz-… |
| CVE-2026-115373 | HIGH | Patched | 6.3 | 2026-10-22 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a missing authorization vulnerability in GET /1.0/operations/{uuid} that lets project-restricted cli… |
| CVE-2026-115371 | HIGH | Patched | 7.1 | 2026-10-22 | Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an improper authorization vulnerability that allows restricted TLS clients to read storage buc… |
| CVE-2026-115365 | HIGH | Patched | 6.6 | 2026-10-22 | OpenBao from 2.3.0 before 2.6.3 contains an incorrect authorization vulnerability in its ACL policy cache that allows tokens to reference policies from arbitrary namespaces… |
| CVE-2026-115355 | HIGH | Patched | 7.5 | 2026-10-22 | Mistune before 3.3.0 contains a path traversal vulnerability in the Include directive that allows attackers to read arbitrary files by supplying ../ sequences in include pa… |
| CVE-2026-115354 | HIGH | Patched | 6.5 | 2026-10-22 | Mistune before 3.3.0 contains a path traversal vulnerability in the opt-in Include directive that allows attackers to read local files by supplying relative or absolute inc… |
| CVE-2026-115352 | HIGH | Patched | 7.5 | 2026-10-22 | Mistune before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser that allows unauthenticated attackers to exhaust CPU by submitting long runs… |
| CVE-2026-115349 | HIGH | Patched | 7.5 | 2026-10-22 | Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity denial of service vulnerability in the parse_link_text function in src/mistune/helpers.py. Attackers can … |
| CVE-2026-115348 | HIGH | Patched | 7.5 | 2026-10-22 | Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser's parse_link_text function that allows unauthenticated attackers … |