Search
4,652 CVEs
CVEs (4,652, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 176–200 of 4,652 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↑ | Description |
|---|---|---|---|---|---|
| CVE-2026-112047 | MEDIUM | Patched | 5.4 | 2026-10-18 | OneUptime 14.0.2 before 14.0.69 contains an incorrect authorization vulnerability that allows authenticated project members to act on clusters outside their scope by exploi… |
| CVE-2026-112048 | MEDIUM | 6.1 | 2026-10-18 | libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geo… | |
| CVE-2026-112049 | MEDIUM | 5.5 | 2026-10-18 | Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in install_archive_content() that allows attackers to write files outside the install directory … | |
| CVE-2026-112050 | LOW | Patched | 3.1 | 2026-10-18 | Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHub… |
| CVE-2026-112051 | HIGH | 6.5 | 2026-10-18 | Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash se… | |
| CVE-2026-112052 | MEDIUM | 6.1 | 2026-10-18 | libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowin… | |
| CVE-2026-112053 | MEDIUM | 5.5 | 2026-10-18 | Schroedinger libschroedinger through 1.0.11 contains an out-of-bounds read vulnerability that allows attackers to read past a static quantiser table by supplying unvalidate… | |
| CVE-2026-112054 | MEDIUM | 5.5 | 2026-10-18 | Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slice_bytes_denom or sli… | |
| CVE-2026-112055 | MEDIUM | 5.5 | 2026-10-18 | wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPX_FKP and wvGetCHPX_FKP caused by an unvalidated FKP run count. Attackers can sup… | |
| CVE-2026-112056 | MEDIUM | 5.5 | 2026-10-18 | wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows attackers to crash applications by supplying crafted… | |
| CVE-2026-112057 | MEDIUM | Patched | 5.5 | 2026-10-18 | libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by su… |
| CVE-2026-112058 | MEDIUM | 5.5 | 2026-10-18 | VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title nu… | |
| CVE-2026-112059 | MEDIUM | 6.1 | 2026-10-18 | libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating the schema byte size to 16 bits when sizing the point… | |
| CVE-2026-112060 | MEDIUM | 6.4 | 2026-10-18 | librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property decode failures. Malicio… | |
| CVE-2026-112061 | MEDIUM | 4.3 | 2026-10-18 | librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads an AMF0 strict-array element count before checking that four by… | |
| CVE-2026-112062 | MEDIUM | 5.9 | 2026-10-18 | lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS respons… | |
| CVE-2026-112063 | MEDIUM | 5.9 | 2026-10-18 | libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending… | |
| CVE-2026-111987 | LOW | 4.3 | 2026-10-18 | A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function read_metadata_from_safetensors of the fi… | |
| CVE-2026-110024 | MEDIUM | Patched | 6.8 | 2026-10-18 | @fastify/jwt is a JWT utility plugin for Fastify. In versions prior to 10.2.5, the top-level sign and verify methods replace the globally configured defaults with the per-c… |
| CVE-2026-111988 | MEDIUM | 4.3 | 2026-10-18 | A security flaw has been discovered in dyad-sh dyad up to 1.16.0. Affected by this issue is some unknown functionality of the component OAuth Callback Handler. Performing a… | |
| CVE-2026-111990 | MEDIUM | 7.3 | 2026-10-18 | A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqli_query of the file a… | |
| CVE-2026-111991 | LOW | 6.3 | 2026-10-18 | A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.__init__ of the file models/common.py of the… | |
| CVE-2026-98433 | NONE | — | 2026-10-18 | In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure In kvmppc_svm_page_in(), if u… | |
| CVE-2026-98434 | NONE | — | 2026-10-18 | In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in proc_dointvec_ms_jiffies_minmax Add the range check to do_proc_int_conv_ms_jif… | |
| CVE-2026-98435 | NONE | — | 2026-10-18 | In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altr_portb_setup() Anchor the devres group and the devm-m… |