96,609 indexed
CVECVE vulnerabilities
96,609 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 6,501–6,550 of 96,609 · page 131 of 1933
| ID | Title | Summary |
|---|---|---|
| CVE-2026-88369 | CVE-2026-88369 CVSS 7.3 | zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump(). |
| CVE-2026-88368 | CVE-2026-88368 CVSS 7.5 | NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in the rasterizer's nsvg__addActive() function. A specially crafted SVG documen… |
| CVE-2026-88367 | CVE-2026-88367 CVSS 6.5 | NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__curveDivs() during SVG stroke rasterization. A specially crafted SVG document… |
| CVE-2026-88366 | CVE-2026-88366 CVSS 7.5 | NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__pathArcTo() when parsing SVG arc commands. A specially crafted SVG doc… |
| CVE-2026-88365 | CVE-2026-88365 CVSS 9.8 | minimp3 commit ea99364f contains an integer overflow vulnerability in mp3dec_skip_id3v1() when parsing the APEv2 tag-size field. |
| CVE-2026-88362 | CVE-2026-88362 CVSS 7.5 | MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c. A specially crafted JavaScript input containing an excessive… |
| CVE-2026-88361 | CVE-2026-88361 CVSS 7.5 | SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries. |
| CVE-2026-88360 | CVE-2026-88360 CVSS 7.5 | libvips 8.19.0 contains a memory access vulnerability when processing little-endian PFM images. If the PFM text header length is not a multiple of four bytes, … |
| CVE-2026-8836 | CVE-2026-8836 CVSS 9.8 | A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 U… |
| CVE-2026-88359 | CVE-2026-88359 CVSS 6.5 | libfyaml 0.9.6 contains a stack exhaustion vulnerability in fy_atom_iter_format(). When processing a specially crafted YAML document containing a very large li… |
| CVE-2026-88358 | CVE-2026-88358 CVSS 6.5 | simdjson 4.6.1 contains a one-byte out-of-bounds read vulnerability in dom::parser::parse_unpadded(). A specially crafted truncated JSON document whose final s… |
| CVE-2026-88357 | CVE-2026-88357 CVSS 7.5 | nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addre… |
| CVE-2026-88355 | CVE-2026-88355 CVSS 7.5 | An incorrect buffer size calculation vulnerability exists in tinyexpr commit 4a7456e in new_expr(). For arity-0 expression nodes, including constants, variable… |
| CVE-2026-88351 | CVE-2026-88351 CVSS 9.8 | An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map3… |
| CVE-2026-88350 | CVE-2026-88350 CVSS 6.2 | An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and mpack_node_utf8_cstr_alloc(). |
| CVE-2026-8835 | CVE-2026-8835 CVSS 7.3ibm | IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. A privileged user, authenticated to the Administration Server, could exploit this vu… |
| CVE-2026-88345 | CVE-2026-88345 CVSS 7.5 | An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema ends with an unterminated quotation … |
| CVE-2026-88344 | CVE-2026-88344 CVSS 7.5 | An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema buffer ends with a digit, the intege… |
| CVE-2026-88341 | CVE-2026-88341 CVSS 5.5 | A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invali… |
| CVE-2026-88340 | CVE-2026-88340 CVSS 7.6 | An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient v… |
| CVE-2026-8834 | CVE-2026-8834 CVSS 8.0ibm | IBM HTTP Server 8.5, and 9.0 contains a buffer overflow vulnerability. A privileged user, authenticated to the Administration Server, could exploit this vulner… |
| CVE-2026-88339 | CVE-2026-88339 CVSS 5.5 | A NULL pointer dereference vulnerability exists in the gf_sg_vrml_field_clone() function of GPAC 2d7da22e (26.08-DEV). The vulnerability occurs when cloning a … |
| CVE-2026-8833 | CVE-2026-8833 CVSS 5.4checkmk | Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an a… |
| CVE-2026-8830 | CVE-2026-8830 CVSS 4.3redhat | A flaw was found in Keycloak. An authenticated user can bypass configured WebAuthn policies during credential registration by manipulating client-side JavaScri… |
| CVE-2026-88290 | CVE-2026-88290 CVSS 7.5 | GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing … |
| CVE-2026-8829 | CVE-2026-8829 CVSS 7.5oalders | HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing HTML::Entities::_decode_entities cached a poin… |
| CVE-2026-88289 | CVE-2026-88289 CVSS 7.5 | GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffers in multiple … |
| CVE-2026-88288 | CVE-2026-88288 CVSS 6.5 | GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote user with valid web credentials to read arbitrary f… |
| CVE-2026-88287 | CVE-2026-88287 CVSS 7.5 | GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Probe requests, allowing a remote attacker to corru… |
| CVE-2026-88286 | CVE-2026-88286 CVSS 7.5 | GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ conn… |
| CVE-2026-88285 | CVE-2026-88285 CVSS 9.4 | GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and iss… |
| CVE-2026-88284 | CVE-2026-88284 CVSS 4.9 | GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control … |
| CVE-2026-88283 | CVE-2026-88283 CVSS 4.9 | GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack cont… |
| CVE-2026-88282 | CVE-2026-88282 CVSS 7.2 | GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be executed as arbitrary root commands during a s… |
| CVE-2026-88281 | CVE-2026-88281 CVSS 4.9 | GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack… |
| CVE-2026-88280 | CVE-2026-88280 CVSS 4.9 | GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF work… |
| CVE-2026-8828 | CVE-2026-8828 | A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows any authenticated users to arbitrarily read, write, update, or… |
| CVE-2026-88279 | CVE-2026-88279 CVSS 4.9 | GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to c… |
| CVE-2026-88278 | CVE-2026-88278 CVSS 9.8 | GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be repla… |
| CVE-2026-88277 | CVE-2026-88277 CVSS 8.8 | GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root. |
| CVE-2026-88276 | CVE-2026-88276 CVSS 7.2 | GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root. |
| CVE-2026-88275 | CVE-2026-88275 CVSS 7.2 | GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration… |
| CVE-2026-88274 | CVE-2026-88274 CVSS 7.2 | GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root. |
| CVE-2026-88273 | CVE-2026-88273 CVSS 7.2 | GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands … |
| CVE-2026-88272 | CVE-2026-88272 CVSS 7.2 | GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the store… |
| CVE-2026-88271 | CVE-2026-88271 CVSS 8.8 | GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR. |
| CVE-2026-88270 | CVE-2026-88270 CVSS 6.5 | GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated. |
| CVE-2026-88269 | CVE-2026-88269 CVSS 6.5 | GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administrative and user credentials through SSV… |
| CVE-2026-88268 | CVE-2026-88268 CVSS 6.5 | GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the SSVR service. |
| CVE-2026-88265 | CVE-2026-88265 CVSS 5.6 | A flaw was found in crun. After pivot_root, reopening /dev/null for stdio can follow a symlink and attach a host file to container stdio, then change that file… |